Oct 2 19:33:13.012744 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:33:13.012777 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:33:13.012804 kernel: BIOS-provided physical RAM map: Oct 2 19:33:13.012816 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:33:13.012825 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:33:13.012834 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:33:13.012845 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable Oct 2 19:33:13.012856 kernel: BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved Oct 2 19:33:13.012870 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:33:13.012880 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:33:13.012890 kernel: NX (Execute Disable) protection: active Oct 2 19:33:13.012897 kernel: SMBIOS 2.8 present. Oct 2 19:33:13.012904 kernel: DMI: OpenStack Foundation OpenStack Nova, BIOS 1.15.0-1 04/01/2014 Oct 2 19:33:13.012911 kernel: Hypervisor detected: KVM Oct 2 19:33:13.012920 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:33:13.012931 kernel: kvm-clock: cpu 0, msr 62f8a001, primary cpu clock Oct 2 19:33:13.012939 kernel: kvm-clock: using sched offset of 6727043637 cycles Oct 2 19:33:13.012947 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:33:13.012956 kernel: tsc: Detected 1996.249 MHz processor Oct 2 19:33:13.012964 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:33:13.012972 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:33:13.012980 kernel: last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 Oct 2 19:33:13.012988 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:33:13.012998 kernel: ACPI: Early table checksum verification disabled Oct 2 19:33:13.013005 kernel: ACPI: RSDP 0x00000000000F5930 000014 (v00 BOCHS ) Oct 2 19:33:13.013013 kernel: ACPI: RSDT 0x000000007FFE1848 000030 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:33:13.013021 kernel: ACPI: FACP 0x000000007FFE172C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:33:13.013029 kernel: ACPI: DSDT 0x000000007FFE0040 0016EC (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:33:13.013037 kernel: ACPI: FACS 0x000000007FFE0000 000040 Oct 2 19:33:13.013045 kernel: ACPI: APIC 0x000000007FFE17A0 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:33:13.013054 kernel: ACPI: WAET 0x000000007FFE1820 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:33:13.013077 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe172c-0x7ffe179f] Oct 2 19:33:13.013095 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe172b] Oct 2 19:33:13.013107 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Oct 2 19:33:13.013114 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17a0-0x7ffe181f] Oct 2 19:33:13.013123 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe1820-0x7ffe1847] Oct 2 19:33:13.013131 kernel: No NUMA configuration found Oct 2 19:33:13.013139 kernel: Faking a node at [mem 0x0000000000000000-0x000000007ffdcfff] Oct 2 19:33:13.013146 kernel: NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] Oct 2 19:33:13.013155 kernel: Zone ranges: Oct 2 19:33:13.013168 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:33:13.013177 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] Oct 2 19:33:13.013185 kernel: Normal empty Oct 2 19:33:13.013193 kernel: Movable zone start for each node Oct 2 19:33:13.013202 kernel: Early memory node ranges Oct 2 19:33:13.013210 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:33:13.013220 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdcfff] Oct 2 19:33:13.013228 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] Oct 2 19:33:13.013236 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:33:13.013244 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:33:13.013253 kernel: On node 0, zone DMA32: 35 pages in unavailable ranges Oct 2 19:33:13.013261 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:33:13.013269 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:33:13.013277 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:33:13.013285 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:33:13.013295 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:33:13.013304 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:33:13.013312 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:33:13.013320 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:33:13.013329 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:33:13.013337 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:33:13.013345 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Oct 2 19:33:13.013353 kernel: Booting paravirtualized kernel on KVM Oct 2 19:33:13.013361 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:33:13.013369 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:33:13.013382 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:33:13.013395 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:33:13.013407 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:33:13.013418 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Oct 2 19:33:13.013441 kernel: kvm-guest: PV spinlocks disabled, no host support Oct 2 19:33:13.013449 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515805 Oct 2 19:33:13.013457 kernel: Policy zone: DMA32 Oct 2 19:33:13.013466 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:33:13.013479 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:33:13.013487 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:33:13.013495 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:33:13.013504 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:33:13.013512 kernel: Memory: 1975340K/2096620K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121020K reserved, 0K cma-reserved) Oct 2 19:33:13.013521 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:33:13.013529 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:33:13.013537 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:33:13.013546 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:33:13.013555 kernel: rcu: RCU event tracing is enabled. Oct 2 19:33:13.013584 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:33:13.013593 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:33:13.013601 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:33:13.013609 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:33:13.013618 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:33:13.013626 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 19:33:13.013634 kernel: Console: colour VGA+ 80x25 Oct 2 19:33:13.013644 kernel: printk: console [tty0] enabled Oct 2 19:33:13.013653 kernel: printk: console [ttyS0] enabled Oct 2 19:33:13.013661 kernel: ACPI: Core revision 20210730 Oct 2 19:33:13.013669 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:33:13.013678 kernel: x2apic enabled Oct 2 19:33:13.013686 kernel: Switched APIC routing to physical x2apic. Oct 2 19:33:13.013694 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:33:13.013702 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:33:13.013710 kernel: Calibrating delay loop (skipped) preset value.. 3992.49 BogoMIPS (lpj=1996249) Oct 2 19:33:13.013719 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Oct 2 19:33:13.013729 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Oct 2 19:33:13.013738 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:33:13.013746 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:33:13.013754 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:33:13.013762 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:33:13.013770 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:33:13.013778 kernel: x86/fpu: x87 FPU will use FXSAVE Oct 2 19:33:13.013787 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:33:13.013795 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:33:13.013805 kernel: LSM: Security Framework initializing Oct 2 19:33:13.013813 kernel: SELinux: Initializing. Oct 2 19:33:13.013821 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:33:13.013829 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:33:13.013838 kernel: smpboot: CPU0: AMD Intel Core i7 9xx (Nehalem Class Core i7) (family: 0x6, model: 0x1a, stepping: 0x3) Oct 2 19:33:13.013846 kernel: Performance Events: AMD PMU driver. Oct 2 19:33:13.013854 kernel: ... version: 0 Oct 2 19:33:13.013862 kernel: ... bit width: 48 Oct 2 19:33:13.013870 kernel: ... generic registers: 4 Oct 2 19:33:13.013886 kernel: ... value mask: 0000ffffffffffff Oct 2 19:33:13.013894 kernel: ... max period: 00007fffffffffff Oct 2 19:33:13.013905 kernel: ... fixed-purpose events: 0 Oct 2 19:33:13.013914 kernel: ... event mask: 000000000000000f Oct 2 19:33:13.013922 kernel: signal: max sigframe size: 1440 Oct 2 19:33:13.013930 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:33:13.013939 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:33:13.013947 kernel: x86: Booting SMP configuration: Oct 2 19:33:13.013959 kernel: .... node #0, CPUs: #1 Oct 2 19:33:13.013967 kernel: kvm-clock: cpu 1, msr 62f8a041, secondary cpu clock Oct 2 19:33:13.013976 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Oct 2 19:33:13.013985 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:33:13.013993 kernel: smpboot: Max logical packages: 2 Oct 2 19:33:13.014002 kernel: smpboot: Total of 2 processors activated (7984.99 BogoMIPS) Oct 2 19:33:13.014010 kernel: devtmpfs: initialized Oct 2 19:33:13.014019 kernel: x86/mm: Memory block size: 128MB Oct 2 19:33:13.014027 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:33:13.014038 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:33:13.014047 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:33:13.014055 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:33:13.014064 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:33:13.014072 kernel: audit: type=2000 audit(1696275191.722:1): state=initialized audit_enabled=0 res=1 Oct 2 19:33:13.014081 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:33:13.014089 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:33:13.014098 kernel: cpuidle: using governor menu Oct 2 19:33:13.014107 kernel: ACPI: bus type PCI registered Oct 2 19:33:13.014117 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:33:13.014125 kernel: dca service started, version 1.12.1 Oct 2 19:33:13.014134 kernel: PCI: Using configuration type 1 for base access Oct 2 19:33:13.014142 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:33:13.014151 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:33:13.014160 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:33:13.014168 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:33:13.014176 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:33:13.014185 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:33:13.014197 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:33:13.014205 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:33:13.014214 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:33:13.014222 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:33:13.014231 kernel: ACPI: Interpreter enabled Oct 2 19:33:13.014239 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:33:13.014248 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:33:13.014256 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:33:13.014265 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:33:13.014275 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:33:13.014443 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:33:13.014538 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 19:33:13.014552 kernel: acpiphp: Slot [3] registered Oct 2 19:33:13.014578 kernel: acpiphp: Slot [4] registered Oct 2 19:33:13.014587 kernel: acpiphp: Slot [5] registered Oct 2 19:33:13.014596 kernel: acpiphp: Slot [6] registered Oct 2 19:33:13.014608 kernel: acpiphp: Slot [7] registered Oct 2 19:33:13.014617 kernel: acpiphp: Slot [8] registered Oct 2 19:33:13.014625 kernel: acpiphp: Slot [9] registered Oct 2 19:33:13.014633 kernel: acpiphp: Slot [10] registered Oct 2 19:33:13.014642 kernel: acpiphp: Slot [11] registered Oct 2 19:33:13.014650 kernel: acpiphp: Slot [12] registered Oct 2 19:33:13.014659 kernel: acpiphp: Slot [13] registered Oct 2 19:33:13.014667 kernel: acpiphp: Slot [14] registered Oct 2 19:33:13.014676 kernel: acpiphp: Slot [15] registered Oct 2 19:33:13.014684 kernel: acpiphp: Slot [16] registered Oct 2 19:33:13.014695 kernel: acpiphp: Slot [17] registered Oct 2 19:33:13.014703 kernel: acpiphp: Slot [18] registered Oct 2 19:33:13.014711 kernel: acpiphp: Slot [19] registered Oct 2 19:33:13.014720 kernel: acpiphp: Slot [20] registered Oct 2 19:33:13.014729 kernel: acpiphp: Slot [21] registered Oct 2 19:33:13.014737 kernel: acpiphp: Slot [22] registered Oct 2 19:33:13.014746 kernel: acpiphp: Slot [23] registered Oct 2 19:33:13.014754 kernel: acpiphp: Slot [24] registered Oct 2 19:33:13.014762 kernel: acpiphp: Slot [25] registered Oct 2 19:33:13.014774 kernel: acpiphp: Slot [26] registered Oct 2 19:33:13.014782 kernel: acpiphp: Slot [27] registered Oct 2 19:33:13.014791 kernel: acpiphp: Slot [28] registered Oct 2 19:33:13.014800 kernel: acpiphp: Slot [29] registered Oct 2 19:33:13.014808 kernel: acpiphp: Slot [30] registered Oct 2 19:33:13.014816 kernel: acpiphp: Slot [31] registered Oct 2 19:33:13.014825 kernel: PCI host bridge to bus 0000:00 Oct 2 19:33:13.014948 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:33:13.015030 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:33:13.015114 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:33:13.015192 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 19:33:13.015280 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:33:13.015358 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:33:13.015461 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:33:13.015558 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:33:13.015701 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:33:13.015792 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc120-0xc12f] Oct 2 19:33:13.015877 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:33:13.015959 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:33:13.016040 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:33:13.016122 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:33:13.016221 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:33:13.016310 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:33:13.016392 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:33:13.016483 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Oct 2 19:33:13.016582 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Oct 2 19:33:13.016673 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Oct 2 19:33:13.016756 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfeb90000-0xfeb90fff] Oct 2 19:33:13.016843 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfeb8ffff pref] Oct 2 19:33:13.016924 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:33:13.017015 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:33:13.017097 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc0bf] Oct 2 19:33:13.017179 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfeb91000-0xfeb91fff] Oct 2 19:33:13.017261 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Oct 2 19:33:13.017343 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] Oct 2 19:33:13.017471 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:33:13.017556 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:33:13.017664 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfeb92000-0xfeb92fff] Oct 2 19:33:13.017754 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Oct 2 19:33:13.017857 kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 Oct 2 19:33:13.017948 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0ff] Oct 2 19:33:13.018035 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Oct 2 19:33:13.018133 kernel: pci 0000:00:06.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:33:13.018230 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc100-0xc11f] Oct 2 19:33:13.018319 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Oct 2 19:33:13.018332 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:33:13.018341 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:33:13.018350 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:33:13.018359 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:33:13.018367 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:33:13.018381 kernel: iommu: Default domain type: Translated Oct 2 19:33:13.018389 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:33:13.018479 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:33:13.018593 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:33:13.018693 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:33:13.018706 kernel: vgaarb: loaded Oct 2 19:33:13.018715 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:33:13.018724 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:33:13.018733 kernel: PTP clock support registered Oct 2 19:33:13.018746 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:33:13.018754 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:33:13.018763 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:33:13.018772 kernel: e820: reserve RAM buffer [mem 0x7ffdd000-0x7fffffff] Oct 2 19:33:13.018780 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:33:13.018789 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:33:13.018798 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:33:13.018807 kernel: pnp: PnP ACPI init Oct 2 19:33:13.018907 kernel: pnp 00:03: [dma 2] Oct 2 19:33:13.018926 kernel: pnp: PnP ACPI: found 5 devices Oct 2 19:33:13.018935 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:33:13.018944 kernel: NET: Registered PF_INET protocol family Oct 2 19:33:13.018953 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:33:13.018962 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 19:33:13.018971 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:33:13.018980 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:33:13.018989 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 19:33:13.019000 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 19:33:13.019009 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:33:13.019019 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:33:13.019027 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:33:13.019036 kernel: NET: Registered PF_XDP protocol family Oct 2 19:33:13.019131 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:33:13.019221 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:33:13.019300 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:33:13.019377 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 19:33:13.019456 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:33:13.019549 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:33:13.025117 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:33:13.025238 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:33:13.025252 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:33:13.025262 kernel: Initialise system trusted keyrings Oct 2 19:33:13.025271 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 19:33:13.025304 kernel: Key type asymmetric registered Oct 2 19:33:13.025313 kernel: Asymmetric key parser 'x509' registered Oct 2 19:33:13.025322 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:33:13.025331 kernel: io scheduler mq-deadline registered Oct 2 19:33:13.025340 kernel: io scheduler kyber registered Oct 2 19:33:13.025349 kernel: io scheduler bfq registered Oct 2 19:33:13.025357 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:33:13.025367 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Oct 2 19:33:13.025377 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:33:13.025386 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 19:33:13.025403 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:33:13.025412 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:33:13.025421 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:33:13.025452 kernel: random: crng init done Oct 2 19:33:13.025461 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:33:13.025471 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:33:13.025479 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:33:13.025489 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:33:13.025770 kernel: rtc_cmos 00:04: RTC can wake from S4 Oct 2 19:33:13.025864 kernel: rtc_cmos 00:04: registered as rtc0 Oct 2 19:33:13.025946 kernel: rtc_cmos 00:04: setting system clock to 2023-10-02T19:33:12 UTC (1696275192) Oct 2 19:33:13.026027 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram Oct 2 19:33:13.026040 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:33:13.026049 kernel: Segment Routing with IPv6 Oct 2 19:33:13.026057 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:33:13.026066 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:33:13.026075 kernel: Key type dns_resolver registered Oct 2 19:33:13.026087 kernel: IPI shorthand broadcast: enabled Oct 2 19:33:13.026096 kernel: sched_clock: Marking stable (704198086, 116897032)->(884378191, -63283073) Oct 2 19:33:13.026105 kernel: registered taskstats version 1 Oct 2 19:33:13.026114 kernel: Loading compiled-in X.509 certificates Oct 2 19:33:13.026123 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:33:13.026132 kernel: Key type .fscrypt registered Oct 2 19:33:13.026140 kernel: Key type fscrypt-provisioning registered Oct 2 19:33:13.026149 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:33:13.026161 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:33:13.026170 kernel: ima: No architecture policies found Oct 2 19:33:13.026179 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:33:13.026187 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:33:13.026196 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:33:13.026205 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:33:13.026214 kernel: Run /init as init process Oct 2 19:33:13.026223 kernel: with arguments: Oct 2 19:33:13.026232 kernel: /init Oct 2 19:33:13.026244 kernel: with environment: Oct 2 19:33:13.026252 kernel: HOME=/ Oct 2 19:33:13.026261 kernel: TERM=linux Oct 2 19:33:13.026269 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:33:13.026281 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:33:13.026293 systemd[1]: Detected virtualization kvm. Oct 2 19:33:13.026303 systemd[1]: Detected architecture x86-64. Oct 2 19:33:13.026313 systemd[1]: Running in initrd. Oct 2 19:33:13.026324 systemd[1]: No hostname configured, using default hostname. Oct 2 19:33:13.026333 systemd[1]: Hostname set to . Oct 2 19:33:13.026343 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:33:13.026352 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:33:13.026362 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:33:13.026371 systemd[1]: Reached target cryptsetup.target. Oct 2 19:33:13.026380 systemd[1]: Reached target paths.target. Oct 2 19:33:13.026389 systemd[1]: Reached target slices.target. Oct 2 19:33:13.026401 systemd[1]: Reached target swap.target. Oct 2 19:33:13.026411 systemd[1]: Reached target timers.target. Oct 2 19:33:13.026421 systemd[1]: Listening on iscsid.socket. Oct 2 19:33:13.026430 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:33:13.026439 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:33:13.026449 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:33:13.026458 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:33:13.026468 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:33:13.026479 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:33:13.026489 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:33:13.026498 systemd[1]: Reached target sockets.target. Oct 2 19:33:13.026508 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:33:13.026532 systemd[1]: Finished network-cleanup.service. Oct 2 19:33:13.026544 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:33:13.026555 systemd[1]: Starting systemd-journald.service... Oct 2 19:33:13.026584 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:33:13.026594 systemd[1]: Starting systemd-resolved.service... Oct 2 19:33:13.026603 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:33:13.026613 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:33:13.026629 systemd-journald[185]: Journal started Oct 2 19:33:13.026700 systemd-journald[185]: Runtime Journal (/run/log/journal/e7560ffc55024021a4053ddc75189d6c) is 4.9M, max 39.5M, 34.5M free. Oct 2 19:33:12.984645 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 19:33:13.055511 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:33:13.055544 kernel: Bridge firewalling registered Oct 2 19:33:13.055556 systemd[1]: Started systemd-journald.service. Oct 2 19:33:13.055605 kernel: audit: type=1130 audit(1696275193.049:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.037652 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 19:33:13.042763 systemd-resolved[187]: Positive Trust Anchors: Oct 2 19:33:13.042775 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:33:13.042810 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:33:13.068656 kernel: SCSI subsystem initialized Oct 2 19:33:13.068684 kernel: audit: type=1130 audit(1696275193.061:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.045524 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 19:33:13.081133 kernel: audit: type=1130 audit(1696275193.061:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.081158 kernel: audit: type=1130 audit(1696275193.062:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.081170 kernel: audit: type=1130 audit(1696275193.062:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.061629 systemd[1]: Started systemd-resolved.service. Oct 2 19:33:13.062369 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:33:13.063079 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:33:13.063663 systemd[1]: Reached target nss-lookup.target. Oct 2 19:33:13.068306 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:33:13.081762 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:33:13.089599 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:33:13.089630 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:33:13.089642 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:33:13.087278 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:33:13.099259 kernel: audit: type=1130 audit(1696275193.094:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.099866 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 19:33:13.101024 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:33:13.102775 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:33:13.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.108936 kernel: audit: type=1130 audit(1696275193.101:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.110417 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:33:13.114434 kernel: audit: type=1130 audit(1696275193.110:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.115221 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:33:13.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.116527 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:33:13.121260 kernel: audit: type=1130 audit(1696275193.115:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.128086 dracut-cmdline[208]: dracut-dracut-053 Oct 2 19:33:13.131272 dracut-cmdline[208]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:33:13.200636 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:33:13.213975 kernel: iscsi: registered transport (tcp) Oct 2 19:33:13.237643 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:33:13.237702 kernel: QLogic iSCSI HBA Driver Oct 2 19:33:13.291981 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:33:13.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.293583 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:33:13.379722 kernel: raid6: sse2x4 gen() 11397 MB/s Oct 2 19:33:13.396659 kernel: raid6: sse2x4 xor() 5085 MB/s Oct 2 19:33:13.413662 kernel: raid6: sse2x2 gen() 14393 MB/s Oct 2 19:33:13.430660 kernel: raid6: sse2x2 xor() 8802 MB/s Oct 2 19:33:13.447662 kernel: raid6: sse2x1 gen() 10807 MB/s Oct 2 19:33:13.465403 kernel: raid6: sse2x1 xor() 6930 MB/s Oct 2 19:33:13.465493 kernel: raid6: using algorithm sse2x2 gen() 14393 MB/s Oct 2 19:33:13.465525 kernel: raid6: .... xor() 8802 MB/s, rmw enabled Oct 2 19:33:13.466254 kernel: raid6: using ssse3x2 recovery algorithm Oct 2 19:33:13.480656 kernel: xor: measuring software checksum speed Oct 2 19:33:13.483165 kernel: prefetch64-sse : 18465 MB/sec Oct 2 19:33:13.483208 kernel: generic_sse : 16345 MB/sec Oct 2 19:33:13.483235 kernel: xor: using function: prefetch64-sse (18465 MB/sec) Oct 2 19:33:13.597679 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:33:13.615264 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:33:13.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.617000 audit: BPF prog-id=7 op=LOAD Oct 2 19:33:13.617000 audit: BPF prog-id=8 op=LOAD Oct 2 19:33:13.619870 systemd[1]: Starting systemd-udevd.service... Oct 2 19:33:13.642614 systemd-udevd[385]: Using default interface naming scheme 'v252'. Oct 2 19:33:13.647366 systemd[1]: Started systemd-udevd.service. Oct 2 19:33:13.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.658058 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:33:13.676231 dracut-pre-trigger[401]: rd.md=0: removing MD RAID activation Oct 2 19:33:13.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.723939 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:33:13.726940 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:33:13.769061 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:33:13.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.830627 kernel: virtio_blk virtio2: [vda] 41943040 512-byte logical blocks (21.5 GB/20.0 GiB) Oct 2 19:33:13.845648 kernel: libata version 3.00 loaded. Oct 2 19:33:13.853033 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:33:13.853092 kernel: GPT:17805311 != 41943039 Oct 2 19:33:13.853104 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:33:13.853115 kernel: GPT:17805311 != 41943039 Oct 2 19:33:13.853125 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:33:13.853135 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:33:13.853330 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:33:13.853577 kernel: scsi host0: ata_piix Oct 2 19:33:13.855400 kernel: scsi host1: ata_piix Oct 2 19:33:13.855584 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc120 irq 14 Oct 2 19:33:13.856765 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc128 irq 15 Oct 2 19:33:14.045698 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (433) Oct 2 19:33:14.063167 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:33:14.064378 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:33:14.076033 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:33:14.088791 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:33:14.098193 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:33:14.100452 systemd[1]: Starting disk-uuid.service... Oct 2 19:33:14.125615 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:33:14.128096 disk-uuid[458]: Primary Header is updated. Oct 2 19:33:14.128096 disk-uuid[458]: Secondary Entries is updated. Oct 2 19:33:14.128096 disk-uuid[458]: Secondary Header is updated. Oct 2 19:33:15.250651 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:33:15.250761 disk-uuid[459]: The operation has completed successfully. Oct 2 19:33:15.535156 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:33:15.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:15.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:15.535442 systemd[1]: Finished disk-uuid.service. Oct 2 19:33:15.554522 systemd[1]: Starting verity-setup.service... Oct 2 19:33:15.588687 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:33:15.698947 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:33:15.702214 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:33:15.704757 systemd[1]: Finished verity-setup.service. Oct 2 19:33:15.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:15.839579 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:33:15.840627 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:33:15.841868 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:33:15.843243 systemd[1]: Starting ignition-setup.service... Oct 2 19:33:15.845459 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:33:15.858617 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:33:15.858715 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:33:15.858743 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:33:15.877526 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:33:15.889977 systemd[1]: Finished ignition-setup.service. Oct 2 19:33:15.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:15.893242 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:33:16.020912 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:33:16.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.022000 audit: BPF prog-id=9 op=LOAD Oct 2 19:33:16.024138 systemd[1]: Starting systemd-networkd.service... Oct 2 19:33:16.050589 systemd-networkd[629]: lo: Link UP Oct 2 19:33:16.051332 systemd-networkd[629]: lo: Gained carrier Oct 2 19:33:16.052692 systemd-networkd[629]: Enumeration completed Oct 2 19:33:16.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.052769 systemd[1]: Started systemd-networkd.service. Oct 2 19:33:16.053297 systemd[1]: Reached target network.target. Oct 2 19:33:16.054425 systemd[1]: Starting iscsiuio.service... Oct 2 19:33:16.056377 systemd-networkd[629]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:33:16.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.059387 systemd-networkd[629]: eth0: Link UP Oct 2 19:33:16.075985 iscsid[638]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:33:16.075985 iscsid[638]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 19:33:16.075985 iscsid[638]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:33:16.075985 iscsid[638]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:33:16.075985 iscsid[638]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:33:16.075985 iscsid[638]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:33:16.075985 iscsid[638]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:33:16.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.059397 systemd-networkd[629]: eth0: Gained carrier Oct 2 19:33:16.068478 systemd[1]: Started iscsiuio.service. Oct 2 19:33:16.070020 systemd[1]: Starting iscsid.service... Oct 2 19:33:16.074758 systemd-networkd[629]: eth0: DHCPv4 address 172.24.4.203/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 19:33:16.075800 systemd[1]: Started iscsid.service. Oct 2 19:33:16.078019 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:33:16.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.100944 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:33:16.101999 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:33:16.102839 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:33:16.105049 systemd[1]: Reached target remote-fs.target. Oct 2 19:33:16.108619 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:33:16.119488 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:33:16.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.253662 systemd-resolved[187]: Detected conflict on linux IN A 172.24.4.203 Oct 2 19:33:16.253691 systemd-resolved[187]: Hostname conflict, changing published hostname from 'linux' to 'linux6'. Oct 2 19:33:16.301768 ignition[543]: Ignition 2.14.0 Oct 2 19:33:16.301779 ignition[543]: Stage: fetch-offline Oct 2 19:33:16.301841 ignition[543]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:33:16.304471 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:33:16.301867 ignition[543]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:33:16.307500 systemd[1]: Starting ignition-fetch.service... Oct 2 19:33:16.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.302906 ignition[543]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:33:16.303000 ignition[543]: parsed url from cmdline: "" Oct 2 19:33:16.303004 ignition[543]: no config URL provided Oct 2 19:33:16.303010 ignition[543]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:33:16.303018 ignition[543]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:33:16.303023 ignition[543]: failed to fetch config: resource requires networking Oct 2 19:33:16.303256 ignition[543]: Ignition finished successfully Oct 2 19:33:16.316295 ignition[652]: Ignition 2.14.0 Oct 2 19:33:16.316303 ignition[652]: Stage: fetch Oct 2 19:33:16.316402 ignition[652]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:33:16.316420 ignition[652]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:33:16.317343 ignition[652]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:33:16.317487 ignition[652]: parsed url from cmdline: "" Oct 2 19:33:16.317492 ignition[652]: no config URL provided Oct 2 19:33:16.317498 ignition[652]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:33:16.317507 ignition[652]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:33:16.320003 ignition[652]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Oct 2 19:33:16.320021 ignition[652]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Oct 2 19:33:16.321917 ignition[652]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Oct 2 19:33:16.790897 ignition[652]: GET result: OK Oct 2 19:33:16.791183 ignition[652]: parsing config with SHA512: e6b17256da49b38b1740ce00f11a336486170c62689585dd0389dc1ac1766e8b0d7cd4f7327c233845e21c2ae153db6e7298b1d7fea5024cb6fcdb09c0153e46 Oct 2 19:33:16.875359 unknown[652]: fetched base config from "system" Oct 2 19:33:16.875397 unknown[652]: fetched base config from "system" Oct 2 19:33:16.876687 ignition[652]: fetch: fetch complete Oct 2 19:33:16.875414 unknown[652]: fetched user config from "openstack" Oct 2 19:33:16.876701 ignition[652]: fetch: fetch passed Oct 2 19:33:16.880632 systemd[1]: Finished ignition-fetch.service. Oct 2 19:33:16.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.876787 ignition[652]: Ignition finished successfully Oct 2 19:33:16.884828 systemd[1]: Starting ignition-kargs.service... Oct 2 19:33:16.906671 ignition[658]: Ignition 2.14.0 Oct 2 19:33:16.906729 ignition[658]: Stage: kargs Oct 2 19:33:16.906932 ignition[658]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:33:16.906954 ignition[658]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:33:16.911118 systemd[1]: Finished ignition-kargs.service. Oct 2 19:33:16.908056 ignition[658]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:33:16.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.915452 systemd[1]: Starting ignition-disks.service... Oct 2 19:33:16.909343 ignition[658]: kargs: kargs passed Oct 2 19:33:16.909393 ignition[658]: Ignition finished successfully Oct 2 19:33:16.925166 ignition[664]: Ignition 2.14.0 Oct 2 19:33:16.925181 ignition[664]: Stage: disks Oct 2 19:33:16.925300 ignition[664]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:33:16.925322 ignition[664]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:33:16.926422 ignition[664]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:33:16.927902 ignition[664]: disks: disks passed Oct 2 19:33:16.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.929821 systemd[1]: Finished ignition-disks.service. Oct 2 19:33:16.927953 ignition[664]: Ignition finished successfully Oct 2 19:33:16.931719 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:33:16.933115 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:33:16.934708 systemd[1]: Reached target local-fs.target. Oct 2 19:33:16.936214 systemd[1]: Reached target sysinit.target. Oct 2 19:33:16.937767 systemd[1]: Reached target basic.target. Oct 2 19:33:16.940981 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:33:16.971034 systemd-fsck[671]: ROOT: clean, 603/1628000 files, 124049/1617920 blocks Oct 2 19:33:16.996368 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:33:16.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:16.999461 systemd[1]: Mounting sysroot.mount... Oct 2 19:33:17.024740 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:33:17.026082 systemd[1]: Mounted sysroot.mount. Oct 2 19:33:17.028480 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:33:17.033490 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:33:17.036830 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:33:17.040289 systemd[1]: Starting flatcar-openstack-hostname.service... Oct 2 19:33:17.042998 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:33:17.043920 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:33:17.051030 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:33:17.059694 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:33:17.068888 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:33:17.084143 initrd-setup-root[683]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:33:17.102624 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (678) Oct 2 19:33:17.115519 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:33:17.115553 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:33:17.115578 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:33:17.118964 initrd-setup-root[691]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:33:17.128735 initrd-setup-root[715]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:33:17.136473 initrd-setup-root[725]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:33:17.141966 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:33:17.208097 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:33:17.223171 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:33:17.223220 kernel: audit: type=1130 audit(1696275197.208:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.209590 systemd[1]: Starting ignition-mount.service... Oct 2 19:33:17.224484 systemd[1]: Starting sysroot-boot.service... Oct 2 19:33:17.225905 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:33:17.226011 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:33:17.255689 ignition[745]: INFO : Ignition 2.14.0 Oct 2 19:33:17.255689 ignition[745]: INFO : Stage: mount Oct 2 19:33:17.256892 ignition[745]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:33:17.256892 ignition[745]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:33:17.258660 ignition[745]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:33:17.260486 ignition[745]: INFO : mount: mount passed Oct 2 19:33:17.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.265784 ignition[745]: INFO : Ignition finished successfully Oct 2 19:33:17.261492 systemd[1]: Finished ignition-mount.service. Oct 2 19:33:17.266856 kernel: audit: type=1130 audit(1696275197.261:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.282789 systemd[1]: Finished sysroot-boot.service. Oct 2 19:33:17.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.287976 kernel: audit: type=1130 audit(1696275197.282:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.292900 coreos-metadata[677]: Oct 02 19:33:17.292 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Oct 2 19:33:17.311381 coreos-metadata[677]: Oct 02 19:33:17.311 INFO Fetch successful Oct 2 19:33:17.311381 coreos-metadata[677]: Oct 02 19:33:17.311 INFO wrote hostname ci-3510-3-0-f-8986abdbb8.novalocal to /sysroot/etc/hostname Oct 2 19:33:17.315892 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Oct 2 19:33:17.316010 systemd[1]: Finished flatcar-openstack-hostname.service. Oct 2 19:33:17.324129 kernel: audit: type=1130 audit(1696275197.316:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.324154 kernel: audit: type=1131 audit(1696275197.316:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.318249 systemd[1]: Starting ignition-files.service... Oct 2 19:33:17.328052 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:33:17.337594 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/vda6 scanned by mount (755) Oct 2 19:33:17.341190 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:33:17.341218 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:33:17.341230 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:33:17.350538 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:33:17.360865 ignition[774]: INFO : Ignition 2.14.0 Oct 2 19:33:17.360865 ignition[774]: INFO : Stage: files Oct 2 19:33:17.362089 ignition[774]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:33:17.362089 ignition[774]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:33:17.362089 ignition[774]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:33:17.364892 ignition[774]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:33:17.365607 ignition[774]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:33:17.365607 ignition[774]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:33:17.370203 ignition[774]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:33:17.371156 ignition[774]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:33:17.372223 unknown[774]: wrote ssh authorized keys file for user: core Oct 2 19:33:17.372943 ignition[774]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:33:17.372943 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:33:17.372943 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:33:17.379853 systemd-networkd[629]: eth0: Gained IPv6LL Oct 2 19:33:17.760203 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:33:18.022058 ignition[774]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:33:18.022058 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:33:18.022058 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 19:33:18.039808 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.24.2/crictl-v1.24.2-linux-amd64.tar.gz: attempt #1 Oct 2 19:33:18.314679 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:33:18.447440 ignition[774]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 961188117863ca9af5b084e84691e372efee93ad09daf6a0422e8d75a5803f394d8968064f7ca89f14e8973766201e731241f32538cf2c8d91f0233e786302df Oct 2 19:33:18.451394 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 19:33:18.451394 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:33:18.451394 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:33:18.580059 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:33:19.753367 ignition[774]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 43b8f213f1732c092e34008d5334e6622a6603f7ec5890c395ac911d50069d0dc11a81fa38436df40fc875a10fee6ee13aa285c017f1de210171065e847c99c5 Oct 2 19:33:19.757156 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:33:19.757156 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:33:19.757156 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:33:19.885818 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:33:22.787503 ignition[774]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 82b36a0b83a1d48ef1f70e3ed2a263b3ce935304cdc0606d194b290217fb04f98628b0d82e200b51ccf5c05c718b2476274ae710bb143fffe28dc6bbf8407d54 Oct 2 19:33:22.790621 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:33:22.790621 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:33:22.790621 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:33:22.915267 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:33:24.320802 ignition[774]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 9006cd791c99f5421c09ae8f6029fdd0ea4608909f590dea41ba4dd5c500440272e9ece21489d1f192966717987251ded5394ea1dd4c5d091b700ac1c8cfa392 Oct 2 19:33:24.323158 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:33:24.323158 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:33:24.325343 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:33:24.325343 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:33:24.325343 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:33:24.325343 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:33:24.325343 ignition[774]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:33:24.325343 ignition[774]: INFO : files: op(b): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(b): op(c): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(b): op(c): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(b): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(d): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(d): op(e): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(d): op(e): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(d): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(f): [started] processing unit "prepare-critools.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(f): op(10): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(f): op(10): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(f): [finished] processing unit "prepare-critools.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(11): [started] processing unit "coreos-metadata.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(11): op(12): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(11): op(12): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(11): [finished] processing unit "coreos-metadata.service" Oct 2 19:33:24.331656 ignition[774]: INFO : files: op(13): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:33:24.368843 kernel: audit: type=1130 audit(1696275204.350:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.369028 ignition[774]: INFO : files: op(13): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:33:24.369028 ignition[774]: INFO : files: op(14): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:33:24.369028 ignition[774]: INFO : files: op(14): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:33:24.369028 ignition[774]: INFO : files: op(15): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:33:24.369028 ignition[774]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:33:24.369028 ignition[774]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:33:24.369028 ignition[774]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:33:24.369028 ignition[774]: INFO : files: files passed Oct 2 19:33:24.369028 ignition[774]: INFO : Ignition finished successfully Oct 2 19:33:24.345953 systemd[1]: Finished ignition-files.service. Oct 2 19:33:24.355466 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:33:24.393000 kernel: audit: type=1130 audit(1696275204.384:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.393021 kernel: audit: type=1131 audit(1696275204.384:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.393098 initrd-setup-root-after-ignition[799]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:33:24.398558 kernel: audit: type=1130 audit(1696275204.393:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.365264 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:33:24.369053 systemd[1]: Starting ignition-quench.service... Oct 2 19:33:24.383509 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:33:24.383783 systemd[1]: Finished ignition-quench.service. Oct 2 19:33:24.386986 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:33:24.394470 systemd[1]: Reached target ignition-complete.target. Oct 2 19:33:24.401312 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:33:24.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.426352 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:33:24.440024 kernel: audit: type=1130 audit(1696275204.426:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.440074 kernel: audit: type=1131 audit(1696275204.426:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.426452 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:33:24.427090 systemd[1]: Reached target initrd-fs.target. Oct 2 19:33:24.438765 systemd[1]: Reached target initrd.target. Oct 2 19:33:24.440409 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:33:24.441205 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:33:24.456138 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:33:24.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.463933 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:33:24.471311 kernel: audit: type=1130 audit(1696275204.456:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.480235 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:33:24.481820 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:33:24.482887 systemd[1]: Stopped target timers.target. Oct 2 19:33:24.483452 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:33:24.488153 kernel: audit: type=1131 audit(1696275204.483:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.483626 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:33:24.484514 systemd[1]: Stopped target initrd.target. Oct 2 19:33:24.488743 systemd[1]: Stopped target basic.target. Oct 2 19:33:24.489693 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:33:24.490605 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:33:24.491470 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:33:24.492388 systemd[1]: Stopped target remote-fs.target. Oct 2 19:33:24.493318 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:33:24.494274 systemd[1]: Stopped target sysinit.target. Oct 2 19:33:24.495215 systemd[1]: Stopped target local-fs.target. Oct 2 19:33:24.496127 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:33:24.497040 systemd[1]: Stopped target swap.target. Oct 2 19:33:24.502468 kernel: audit: type=1131 audit(1696275204.498:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.497897 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:33:24.498057 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:33:24.507609 kernel: audit: type=1131 audit(1696275204.503:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.498973 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:33:24.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.502999 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:33:24.508000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.503159 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:33:24.504093 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:33:24.504253 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:33:24.508301 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:33:24.508465 systemd[1]: Stopped ignition-files.service. Oct 2 19:33:24.510292 systemd[1]: Stopping ignition-mount.service... Oct 2 19:33:24.515130 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:33:24.516023 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:33:24.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.518288 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:33:24.518893 ignition[812]: INFO : Ignition 2.14.0 Oct 2 19:33:24.518893 ignition[812]: INFO : Stage: umount Oct 2 19:33:24.520118 ignition[812]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:33:24.520118 ignition[812]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:33:24.520118 ignition[812]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:33:24.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.527481 ignition[812]: INFO : umount: umount passed Oct 2 19:33:24.527481 ignition[812]: INFO : Ignition finished successfully Oct 2 19:33:24.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.523363 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:33:24.523545 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:33:24.524260 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:33:24.524424 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:33:24.527409 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:33:24.527507 systemd[1]: Stopped ignition-mount.service. Oct 2 19:33:24.529404 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:33:24.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.529511 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:33:24.534556 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:33:24.534647 systemd[1]: Stopped ignition-disks.service. Oct 2 19:33:24.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.535730 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:33:24.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.535774 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:33:24.536652 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:33:24.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.536691 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:33:24.541908 systemd[1]: Stopped target network.target. Oct 2 19:33:24.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.543048 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:33:24.543093 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:33:24.544035 systemd[1]: Stopped target paths.target. Oct 2 19:33:24.544885 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:33:24.546691 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:33:24.547254 systemd[1]: Stopped target slices.target. Oct 2 19:33:24.548448 systemd[1]: Stopped target sockets.target. Oct 2 19:33:24.549427 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:33:24.549458 systemd[1]: Closed iscsid.socket. Oct 2 19:33:24.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.550327 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:33:24.550351 systemd[1]: Closed iscsiuio.socket. Oct 2 19:33:24.551270 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:33:24.551307 systemd[1]: Stopped ignition-setup.service. Oct 2 19:33:24.552334 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:33:24.553330 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:33:24.557274 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:33:24.557639 systemd-networkd[629]: eth0: DHCPv6 lease lost Oct 2 19:33:24.559761 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:33:24.559878 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:33:24.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.562287 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:33:24.562415 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:33:24.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.565761 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:33:24.565812 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:33:24.566000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:33:24.566000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:33:24.567287 systemd[1]: Stopping network-cleanup.service... Oct 2 19:33:24.572315 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:33:24.572390 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:33:24.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.573790 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:33:24.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.573851 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:33:24.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.574868 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:33:24.574922 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:33:24.575689 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:33:24.577813 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:33:24.578386 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:33:24.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.578482 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:33:24.580165 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:33:24.580221 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:33:24.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.582831 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:33:24.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.582988 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:33:24.584732 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:33:24.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.584825 systemd[1]: Stopped network-cleanup.service. Oct 2 19:33:24.585703 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:33:24.585752 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:33:24.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.586497 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:33:24.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.586534 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:33:24.589000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.587368 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:33:24.587422 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:33:24.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.588486 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:33:24.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.588533 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:33:24.589409 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:33:24.589469 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:33:24.591423 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:33:24.596018 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:33:24.596078 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:33:24.598724 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:33:24.598804 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:33:24.599634 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:33:24.601209 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:33:24.621085 systemd[1]: Switching root. Oct 2 19:33:24.646710 iscsid[638]: iscsid shutting down. Oct 2 19:33:24.648043 systemd-journald[185]: Received SIGTERM from PID 1 (n/a). Oct 2 19:33:24.648151 systemd-journald[185]: Journal stopped Oct 2 19:33:29.188015 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:33:29.188202 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:33:29.188238 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:33:29.188275 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:33:29.188303 kernel: SELinux: policy capability open_perms=1 Oct 2 19:33:29.188342 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:33:29.188369 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:33:29.188412 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:33:29.188438 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:33:29.188464 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:33:29.189998 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:33:29.190035 systemd[1]: Successfully loaded SELinux policy in 101.360ms. Oct 2 19:33:29.190091 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 21.462ms. Oct 2 19:33:29.190126 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:33:29.190168 systemd[1]: Detected virtualization kvm. Oct 2 19:33:29.190198 systemd[1]: Detected architecture x86-64. Oct 2 19:33:29.190228 systemd[1]: Detected first boot. Oct 2 19:33:29.190270 systemd[1]: Hostname set to . Oct 2 19:33:29.190303 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:33:29.190331 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:33:29.190370 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:33:29.190405 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:33:29.190438 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:33:29.190468 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:33:29.190496 systemd[1]: Stopped iscsiuio.service. Oct 2 19:33:29.190524 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:33:29.190553 systemd[1]: Stopped iscsid.service. Oct 2 19:33:29.190632 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:33:29.190711 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:33:29.190752 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:33:29.190782 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:33:29.190811 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:33:29.190841 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:33:29.190869 systemd[1]: Created slice system-getty.slice. Oct 2 19:33:29.190899 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:33:29.190927 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:33:29.190955 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:33:29.190982 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:33:29.191015 systemd[1]: Created slice user.slice. Oct 2 19:33:29.191042 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:33:29.191074 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:33:29.191102 systemd[1]: Set up automount boot.automount. Oct 2 19:33:29.191131 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:33:29.191158 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:33:29.191190 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:33:29.191219 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:33:29.191246 systemd[1]: Reached target integritysetup.target. Oct 2 19:33:29.191274 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:33:29.191302 systemd[1]: Reached target remote-fs.target. Oct 2 19:33:29.191330 systemd[1]: Reached target slices.target. Oct 2 19:33:29.191359 systemd[1]: Reached target swap.target. Oct 2 19:33:29.191387 systemd[1]: Reached target torcx.target. Oct 2 19:33:29.191417 systemd[1]: Reached target veritysetup.target. Oct 2 19:33:29.191454 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:33:29.191484 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:33:29.191511 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:33:29.191540 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:33:29.191597 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:33:29.191628 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:33:29.191657 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:33:29.191685 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:33:29.191713 systemd[1]: Mounting media.mount... Oct 2 19:33:29.191741 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:33:29.191776 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:33:29.191805 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:33:29.191833 systemd[1]: Mounting tmp.mount... Oct 2 19:33:29.191861 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:33:29.191889 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:33:29.191918 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:33:29.191946 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:33:29.191974 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:33:29.192001 systemd[1]: Starting modprobe@drm.service... Oct 2 19:33:29.192034 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:33:29.192062 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:33:29.192093 systemd[1]: Starting modprobe@loop.service... Oct 2 19:33:29.192123 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:33:29.192151 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:33:29.192179 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:33:29.192208 kernel: fuse: init (API version 7.34) Oct 2 19:33:29.192236 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:33:29.192267 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:33:29.192296 systemd[1]: Stopped systemd-journald.service. Oct 2 19:33:29.192324 systemd[1]: Starting systemd-journald.service... Oct 2 19:33:29.192351 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:33:29.192379 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:33:29.192407 kernel: loop: module loaded Oct 2 19:33:29.192434 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:33:29.192462 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:33:29.192490 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:33:29.192519 systemd[1]: Stopped verity-setup.service. Oct 2 19:33:29.192553 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:33:29.192610 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:33:29.192641 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:33:29.192669 systemd[1]: Mounted media.mount. Oct 2 19:33:29.192696 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:33:29.192728 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:33:29.192757 systemd[1]: Mounted tmp.mount. Oct 2 19:33:29.192784 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:33:29.192812 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:33:29.192845 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:33:29.192875 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:33:29.192911 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:33:29.192939 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:33:29.192967 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:33:29.192999 systemd[1]: Finished modprobe@drm.service. Oct 2 19:33:29.193027 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:33:29.193055 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:33:29.193083 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:33:29.193110 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:33:29.193138 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:33:29.193167 systemd[1]: Finished modprobe@loop.service. Oct 2 19:33:29.193194 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:33:29.193222 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:33:29.193255 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:33:29.193285 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:33:29.193314 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:33:29.193346 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:33:29.193375 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:33:29.193432 systemd-journald[923]: Journal started Oct 2 19:33:29.193546 systemd-journald[923]: Runtime Journal (/run/log/journal/e7560ffc55024021a4053ddc75189d6c) is 4.9M, max 39.5M, 34.5M free. Oct 2 19:33:29.201032 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:33:29.211966 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:33:24.999000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:33:25.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:33:25.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:33:25.277000 audit: BPF prog-id=10 op=LOAD Oct 2 19:33:25.277000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:33:25.277000 audit: BPF prog-id=11 op=LOAD Oct 2 19:33:25.277000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:33:28.851000 audit: BPF prog-id=12 op=LOAD Oct 2 19:33:28.851000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:33:28.851000 audit: BPF prog-id=13 op=LOAD Oct 2 19:33:28.851000 audit: BPF prog-id=14 op=LOAD Oct 2 19:33:28.851000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:33:28.851000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:33:28.852000 audit: BPF prog-id=15 op=LOAD Oct 2 19:33:28.852000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:33:28.852000 audit: BPF prog-id=16 op=LOAD Oct 2 19:33:28.852000 audit: BPF prog-id=17 op=LOAD Oct 2 19:33:28.852000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:33:28.852000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:33:28.855000 audit: BPF prog-id=18 op=LOAD Oct 2 19:33:28.855000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:33:28.855000 audit: BPF prog-id=19 op=LOAD Oct 2 19:33:28.855000 audit: BPF prog-id=20 op=LOAD Oct 2 19:33:29.220669 systemd[1]: Started systemd-journald.service. Oct 2 19:33:28.855000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:33:28.855000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:33:28.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:28.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:28.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:28.865000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:33:28.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:28.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.018000 audit: BPF prog-id=21 op=LOAD Oct 2 19:33:29.019000 audit: BPF prog-id=22 op=LOAD Oct 2 19:33:29.019000 audit: BPF prog-id=23 op=LOAD Oct 2 19:33:29.019000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:33:29.019000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:33:29.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.178000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:33:29.178000 audit[923]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7fff7fe3ea50 a2=4000 a3=7fff7fe3eaec items=0 ppid=1 pid=923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:29.178000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:33:29.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:28.849520 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:33:25.443494 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:33:28.849533 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:33:25.444444 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:33:28.856530 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:33:25.444468 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:33:29.221615 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:33:25.444518 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:33:29.223384 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:33:25.444531 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:33:29.223952 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:33:25.444595 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:33:29.224680 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:33:25.444611 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:33:29.225804 systemd[1]: Reached target network-pre.target. Oct 2 19:33:25.444856 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:33:29.229516 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:33:25.444896 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:33:25.444911 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:33:29.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:25.445792 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:33:29.234557 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:33:25.445835 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:33:29.235616 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:33:25.445856 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:33:25.445873 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:33:29.252505 systemd-journald[923]: Time spent on flushing to /var/log/journal/e7560ffc55024021a4053ddc75189d6c is 31.326ms for 1113 entries. Oct 2 19:33:29.252505 systemd-journald[923]: System Journal (/var/log/journal/e7560ffc55024021a4053ddc75189d6c) is 8.0M, max 584.8M, 576.8M free. Oct 2 19:33:29.306395 systemd-journald[923]: Received client request to flush runtime journal. Oct 2 19:33:29.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:25.445891 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:33:29.238707 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:33:25.445907 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:33:29.264058 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:33:28.444429 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:28Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:33:29.278815 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:33:28.444809 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:28Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:33:29.298076 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:33:28.444924 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:28Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:33:29.299880 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:33:28.445151 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:28Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:33:28.445240 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:28Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:33:28.445312 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:33:28Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:33:29.309718 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:33:29.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:29.310653 udevadm[956]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:33:30.285978 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:33:30.300408 kernel: kauditd_printk_skb: 97 callbacks suppressed Oct 2 19:33:30.300675 kernel: audit: type=1130 audit(1696275210.286:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:30.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:30.300000 audit: BPF prog-id=24 op=LOAD Oct 2 19:33:30.309339 kernel: audit: type=1334 audit(1696275210.300:145): prog-id=24 op=LOAD Oct 2 19:33:30.309519 kernel: audit: type=1334 audit(1696275210.304:146): prog-id=25 op=LOAD Oct 2 19:33:30.304000 audit: BPF prog-id=25 op=LOAD Oct 2 19:33:30.308896 systemd[1]: Starting systemd-udevd.service... Oct 2 19:33:30.304000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:33:30.304000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:33:30.314457 kernel: audit: type=1334 audit(1696275210.304:147): prog-id=7 op=UNLOAD Oct 2 19:33:30.314560 kernel: audit: type=1334 audit(1696275210.304:148): prog-id=8 op=UNLOAD Oct 2 19:33:30.366040 systemd-udevd[957]: Using default interface naming scheme 'v252'. Oct 2 19:33:30.429897 systemd[1]: Started systemd-udevd.service. Oct 2 19:33:30.446625 kernel: audit: type=1130 audit(1696275210.431:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:30.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:30.465677 kernel: audit: type=1334 audit(1696275210.459:150): prog-id=26 op=LOAD Oct 2 19:33:30.459000 audit: BPF prog-id=26 op=LOAD Oct 2 19:33:30.463641 systemd[1]: Starting systemd-networkd.service... Oct 2 19:33:30.478431 kernel: audit: type=1334 audit(1696275210.472:151): prog-id=27 op=LOAD Oct 2 19:33:30.478503 kernel: audit: type=1334 audit(1696275210.472:152): prog-id=28 op=LOAD Oct 2 19:33:30.478521 kernel: audit: type=1334 audit(1696275210.473:153): prog-id=29 op=LOAD Oct 2 19:33:30.472000 audit: BPF prog-id=27 op=LOAD Oct 2 19:33:30.472000 audit: BPF prog-id=28 op=LOAD Oct 2 19:33:30.473000 audit: BPF prog-id=29 op=LOAD Oct 2 19:33:30.477913 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:33:30.515829 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:33:30.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:30.518532 systemd[1]: Started systemd-userdbd.service. Oct 2 19:33:30.585608 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:33:30.600607 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:33:30.614293 systemd-networkd[967]: lo: Link UP Oct 2 19:33:30.614305 systemd-networkd[967]: lo: Gained carrier Oct 2 19:33:30.614774 systemd-networkd[967]: Enumeration completed Oct 2 19:33:30.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:30.614876 systemd[1]: Started systemd-networkd.service. Oct 2 19:33:30.614927 systemd-networkd[967]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:33:30.616495 systemd-networkd[967]: eth0: Link UP Oct 2 19:33:30.616504 systemd-networkd[967]: eth0: Gained carrier Oct 2 19:33:30.624811 systemd-networkd[967]: eth0: DHCPv4 address 172.24.4.203/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 19:33:30.622000 audit[979]: AVC avc: denied { confidentiality } for pid=979 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:33:30.622000 audit[979]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=556682f03070 a1=32194 a2=7f1d5daf4bc5 a3=5 items=106 ppid=957 pid=979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:30.622000 audit: CWD cwd="/" Oct 2 19:33:30.622000 audit: PATH item=0 name=(null) inode=14474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=1 name=(null) inode=14475 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=2 name=(null) inode=14474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=3 name=(null) inode=14476 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=4 name=(null) inode=14474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=5 name=(null) inode=14477 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=6 name=(null) inode=14477 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=7 name=(null) inode=14478 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=8 name=(null) inode=14477 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=9 name=(null) inode=14479 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=10 name=(null) inode=14477 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=11 name=(null) inode=14480 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=12 name=(null) inode=14477 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=13 name=(null) inode=14481 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=14 name=(null) inode=14477 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=15 name=(null) inode=14482 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=16 name=(null) inode=14474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=17 name=(null) inode=14483 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=18 name=(null) inode=14483 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=19 name=(null) inode=14484 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=20 name=(null) inode=14483 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=21 name=(null) inode=14485 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=22 name=(null) inode=14483 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=23 name=(null) inode=14486 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=24 name=(null) inode=14483 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=25 name=(null) inode=14487 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=26 name=(null) inode=14483 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=27 name=(null) inode=14488 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=28 name=(null) inode=14474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=29 name=(null) inode=14489 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=30 name=(null) inode=14489 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=31 name=(null) inode=14490 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=32 name=(null) inode=14489 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=33 name=(null) inode=14491 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=34 name=(null) inode=14489 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=35 name=(null) inode=14492 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=36 name=(null) inode=14489 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=37 name=(null) inode=14493 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=38 name=(null) inode=14489 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=39 name=(null) inode=14494 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=40 name=(null) inode=14474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=41 name=(null) inode=14495 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=42 name=(null) inode=14495 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=43 name=(null) inode=14496 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=44 name=(null) inode=14495 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=45 name=(null) inode=14497 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=46 name=(null) inode=14495 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=47 name=(null) inode=14498 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=48 name=(null) inode=14495 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=49 name=(null) inode=14499 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=50 name=(null) inode=14495 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=51 name=(null) inode=14500 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=52 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=53 name=(null) inode=14501 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=54 name=(null) inode=14501 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=55 name=(null) inode=14502 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=56 name=(null) inode=14501 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=57 name=(null) inode=14503 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=58 name=(null) inode=14501 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=59 name=(null) inode=14504 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=60 name=(null) inode=14504 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=61 name=(null) inode=14505 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=62 name=(null) inode=14504 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=63 name=(null) inode=14506 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=64 name=(null) inode=14504 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=65 name=(null) inode=14507 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=66 name=(null) inode=14504 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=67 name=(null) inode=14508 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=68 name=(null) inode=14504 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=69 name=(null) inode=14509 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=70 name=(null) inode=14501 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=71 name=(null) inode=14510 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=72 name=(null) inode=14510 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=73 name=(null) inode=14511 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=74 name=(null) inode=14510 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=75 name=(null) inode=14512 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=76 name=(null) inode=14510 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=77 name=(null) inode=14513 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=78 name=(null) inode=14510 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=79 name=(null) inode=14514 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=80 name=(null) inode=14510 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=81 name=(null) inode=14515 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=82 name=(null) inode=14501 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=83 name=(null) inode=14516 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=84 name=(null) inode=14516 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=85 name=(null) inode=14517 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=86 name=(null) inode=14516 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=87 name=(null) inode=14518 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=88 name=(null) inode=14516 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=89 name=(null) inode=14519 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=90 name=(null) inode=14516 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=91 name=(null) inode=14520 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=92 name=(null) inode=14516 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=93 name=(null) inode=14521 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=94 name=(null) inode=14501 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=95 name=(null) inode=14522 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=96 name=(null) inode=14522 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=97 name=(null) inode=14523 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=98 name=(null) inode=14522 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=99 name=(null) inode=14524 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=100 name=(null) inode=14522 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=101 name=(null) inode=14525 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=102 name=(null) inode=14522 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=103 name=(null) inode=14526 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=104 name=(null) inode=14522 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PATH item=105 name=(null) inode=14527 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:33:30.622000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:33:30.653119 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:33:30.654995 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:33:30.663589 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:33:30.667581 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:33:30.707101 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:33:30.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:30.708784 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:33:30.751816 lvm[986]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:33:30.785780 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:33:30.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:30.786414 systemd[1]: Reached target cryptsetup.target. Oct 2 19:33:30.787923 systemd[1]: Starting lvm2-activation.service... Oct 2 19:33:30.791884 lvm[987]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:33:30.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:30.817626 systemd[1]: Finished lvm2-activation.service. Oct 2 19:33:30.818193 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:33:30.818641 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:33:30.818668 systemd[1]: Reached target local-fs.target. Oct 2 19:33:30.819077 systemd[1]: Reached target machines.target. Oct 2 19:33:30.820634 systemd[1]: Starting ldconfig.service... Oct 2 19:33:30.822044 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:33:30.822104 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:33:30.823127 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:33:30.824704 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:33:30.829952 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:33:30.832256 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:33:30.832363 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:33:30.835124 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:33:30.860270 systemd[1]: boot.automount: Got automount request for /boot, triggered by 989 (bootctl) Oct 2 19:33:30.863152 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:33:30.880691 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:33:30.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:31.242156 systemd-tmpfiles[992]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:33:31.485005 systemd-tmpfiles[992]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:33:31.527536 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:33:31.528954 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:33:31.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:31.532906 systemd-tmpfiles[992]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:33:31.780004 systemd-networkd[967]: eth0: Gained IPv6LL Oct 2 19:33:31.956499 systemd-fsck[997]: fsck.fat 4.2 (2021-01-31) Oct 2 19:33:31.956499 systemd-fsck[997]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:33:31.960386 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:33:31.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:31.965197 systemd[1]: Mounting boot.mount... Oct 2 19:33:31.996275 systemd[1]: Mounted boot.mount. Oct 2 19:33:32.056068 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:33:32.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:32.140227 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:33:32.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:32.145946 systemd[1]: Starting audit-rules.service... Oct 2 19:33:32.149546 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:33:32.154000 audit: BPF prog-id=30 op=LOAD Oct 2 19:33:32.156000 audit: BPF prog-id=31 op=LOAD Oct 2 19:33:32.153319 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:33:32.155670 systemd[1]: Starting systemd-resolved.service... Oct 2 19:33:32.158640 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:33:32.160196 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:33:32.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:32.166203 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:33:32.166873 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:33:32.185000 audit[1006]: SYSTEM_BOOT pid=1006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:33:32.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:32.189090 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:33:32.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:32.225911 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:33:32.245000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:33:32.245000 audit[1020]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffcd7e25c0 a2=420 a3=0 items=0 ppid=1000 pid=1020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:32.245000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:33:32.246121 augenrules[1020]: No rules Oct 2 19:33:32.247451 systemd[1]: Finished audit-rules.service. Oct 2 19:33:32.261660 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:33:32.262306 systemd[1]: Reached target time-set.target. Oct 2 19:33:32.278299 systemd-resolved[1004]: Positive Trust Anchors: Oct 2 19:33:32.278631 systemd-resolved[1004]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:33:32.278722 systemd-resolved[1004]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:33:32.301654 systemd-resolved[1004]: Using system hostname 'ci-3510-3-0-f-8986abdbb8.novalocal'. Oct 2 19:33:32.303909 systemd[1]: Started systemd-resolved.service. Oct 2 19:33:32.304904 systemd[1]: Reached target network.target. Oct 2 19:33:32.305757 systemd[1]: Reached target nss-lookup.target. Oct 2 19:33:32.373965 systemd-timesyncd[1005]: Contacted time server 82.64.42.185:123 (0.flatcar.pool.ntp.org). Oct 2 19:33:32.374139 systemd-timesyncd[1005]: Initial clock synchronization to Mon 2023-10-02 19:33:32.252006 UTC. Oct 2 19:33:32.624259 ldconfig[988]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:33:32.636858 systemd[1]: Finished ldconfig.service. Oct 2 19:33:32.640990 systemd[1]: Starting systemd-update-done.service... Oct 2 19:33:32.654763 systemd[1]: Finished systemd-update-done.service. Oct 2 19:33:32.656051 systemd[1]: Reached target sysinit.target. Oct 2 19:33:32.657341 systemd[1]: Started motdgen.path. Oct 2 19:33:32.658523 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:33:32.660289 systemd[1]: Started logrotate.timer. Oct 2 19:33:32.662166 systemd[1]: Started mdadm.timer. Oct 2 19:33:32.663208 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:33:32.664309 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:33:32.664376 systemd[1]: Reached target paths.target. Oct 2 19:33:32.665446 systemd[1]: Reached target timers.target. Oct 2 19:33:32.668075 systemd[1]: Listening on dbus.socket. Oct 2 19:33:32.671390 systemd[1]: Starting docker.socket... Oct 2 19:33:32.678416 systemd[1]: Listening on sshd.socket. Oct 2 19:33:32.679735 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:33:32.680671 systemd[1]: Listening on docker.socket. Oct 2 19:33:32.681983 systemd[1]: Reached target sockets.target. Oct 2 19:33:32.683046 systemd[1]: Reached target basic.target. Oct 2 19:33:32.684226 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:33:32.684295 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:33:32.686423 systemd[1]: Starting containerd.service... Oct 2 19:33:32.689532 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:33:32.692998 systemd[1]: Starting dbus.service... Oct 2 19:33:32.698666 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:33:32.708099 systemd[1]: Starting extend-filesystems.service... Oct 2 19:33:32.710251 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:33:32.713212 systemd[1]: Starting motdgen.service... Oct 2 19:33:32.719653 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:33:32.721029 systemd[1]: Starting prepare-critools.service... Oct 2 19:33:32.722807 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:33:32.727760 jq[1034]: false Oct 2 19:33:32.727501 systemd[1]: Starting sshd-keygen.service... Oct 2 19:33:32.730331 systemd[1]: Starting systemd-logind.service... Oct 2 19:33:32.730832 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:33:32.730899 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:33:32.731315 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:33:32.731928 systemd[1]: Starting update-engine.service... Oct 2 19:33:32.739330 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:33:32.741974 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:33:32.742128 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:33:32.754268 jq[1043]: true Oct 2 19:33:32.767436 tar[1045]: ./ Oct 2 19:33:32.767436 tar[1045]: ./macvlan Oct 2 19:33:32.774042 tar[1046]: crictl Oct 2 19:33:32.784701 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:33:32.784867 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:33:32.788541 jq[1052]: true Oct 2 19:33:32.792620 dbus-daemon[1031]: [system] SELinux support is enabled Oct 2 19:33:32.792754 systemd[1]: Started dbus.service. Oct 2 19:33:32.795256 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:33:32.795282 systemd[1]: Reached target system-config.target. Oct 2 19:33:32.795751 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:33:32.795776 systemd[1]: Reached target user-config.target. Oct 2 19:33:32.828946 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:33:32.829109 systemd[1]: Finished motdgen.service. Oct 2 19:33:32.829497 extend-filesystems[1035]: Found vda Oct 2 19:33:32.830311 extend-filesystems[1035]: Found vda1 Oct 2 19:33:32.831040 extend-filesystems[1035]: Found vda2 Oct 2 19:33:32.832213 extend-filesystems[1035]: Found vda3 Oct 2 19:33:32.833360 extend-filesystems[1035]: Found usr Oct 2 19:33:32.833928 extend-filesystems[1035]: Found vda4 Oct 2 19:33:32.835139 extend-filesystems[1035]: Found vda6 Oct 2 19:33:32.835700 extend-filesystems[1035]: Found vda7 Oct 2 19:33:32.836213 extend-filesystems[1035]: Found vda9 Oct 2 19:33:32.836734 extend-filesystems[1035]: Checking size of /dev/vda9 Oct 2 19:33:32.869455 extend-filesystems[1035]: Resized partition /dev/vda9 Oct 2 19:33:32.891486 extend-filesystems[1088]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:33:32.903725 bash[1083]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:33:32.904296 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:33:32.935184 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 4635643 blocks Oct 2 19:33:32.947863 update_engine[1042]: I1002 19:33:32.946338 1042 main.cc:92] Flatcar Update Engine starting Oct 2 19:33:32.948393 systemd-logind[1041]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:33:32.948421 systemd-logind[1041]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:33:32.952220 systemd-logind[1041]: New seat seat0. Oct 2 19:33:32.953638 systemd[1]: Started update-engine.service. Oct 2 19:33:32.953875 update_engine[1042]: I1002 19:33:32.953663 1042 update_check_scheduler.cc:74] Next update check in 8m29s Oct 2 19:33:32.958545 systemd[1]: Started locksmithd.service. Oct 2 19:33:32.965076 systemd[1]: Started systemd-logind.service. Oct 2 19:33:32.980422 env[1047]: time="2023-10-02T19:33:32.980369328Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:33:32.989242 tar[1045]: ./static Oct 2 19:33:32.994825 kernel: EXT4-fs (vda9): resized filesystem to 4635643 Oct 2 19:33:33.088448 coreos-metadata[1030]: Oct 02 19:33:33.002 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Oct 2 19:33:33.088853 env[1047]: time="2023-10-02T19:33:33.020828899Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:33:33.096582 extend-filesystems[1088]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Oct 2 19:33:33.096582 extend-filesystems[1088]: old_desc_blocks = 1, new_desc_blocks = 3 Oct 2 19:33:33.096582 extend-filesystems[1088]: The filesystem on /dev/vda9 is now 4635643 (4k) blocks long. Oct 2 19:33:33.101952 env[1047]: time="2023-10-02T19:33:33.095853446Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:33:33.098514 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:33:33.102061 extend-filesystems[1035]: Resized filesystem in /dev/vda9 Oct 2 19:33:33.098962 systemd[1]: Finished extend-filesystems.service. Oct 2 19:33:33.104346 env[1047]: time="2023-10-02T19:33:33.103974107Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:33:33.104346 env[1047]: time="2023-10-02T19:33:33.104047897Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:33:33.104926 env[1047]: time="2023-10-02T19:33:33.104521861Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:33:33.104978 env[1047]: time="2023-10-02T19:33:33.104922154Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:33:33.105028 env[1047]: time="2023-10-02T19:33:33.104964736Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:33:33.105028 env[1047]: time="2023-10-02T19:33:33.104995933Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:33:33.105220 env[1047]: time="2023-10-02T19:33:33.105181606Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:33:33.106517 env[1047]: time="2023-10-02T19:33:33.106447207Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:33:33.107663 env[1047]: time="2023-10-02T19:33:33.106764189Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:33:33.107663 env[1047]: time="2023-10-02T19:33:33.107227517Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:33:33.107663 env[1047]: time="2023-10-02T19:33:33.107375570Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:33:33.107663 env[1047]: time="2023-10-02T19:33:33.107408376Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:33:33.127701 env[1047]: time="2023-10-02T19:33:33.127641132Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:33:33.127761 env[1047]: time="2023-10-02T19:33:33.127725202Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:33:33.127802 env[1047]: time="2023-10-02T19:33:33.127767301Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.127839799Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.127954109Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.127988838Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128006597Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128058889Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128081088Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128099024Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128135402Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128160294Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128341743Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128499258Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128884969Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128918563Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.129382 env[1047]: time="2023-10-02T19:33:33.128934428Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129001222Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129021350Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129056345Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129073443Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129088361Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129101345Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129114270Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129146178Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129162279Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:33:33.129744 env[1047]: time="2023-10-02T19:33:33.129345396Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.131716 env[1047]: time="2023-10-02T19:33:33.129363490Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.131716 env[1047]: time="2023-10-02T19:33:33.130000702Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.131716 env[1047]: time="2023-10-02T19:33:33.130017148Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:33:33.131716 env[1047]: time="2023-10-02T19:33:33.130036980Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:33:33.131716 env[1047]: time="2023-10-02T19:33:33.130070248Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:33:33.131716 env[1047]: time="2023-10-02T19:33:33.130089093Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:33:33.131716 env[1047]: time="2023-10-02T19:33:33.130142825Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.130408464Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.130490876Z" level=info msg="Connect containerd service" Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.130528881Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.131219843Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.131342756Z" level=info msg="Start subscribing containerd event" Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.131398836Z" level=info msg="Start recovering state" Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.131457215Z" level=info msg="Start event monitor" Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.131480380Z" level=info msg="Start snapshots syncer" Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.131490977Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:33:33.131916 env[1047]: time="2023-10-02T19:33:33.131501089Z" level=info msg="Start streaming server" Oct 2 19:33:33.137396 env[1047]: time="2023-10-02T19:33:33.134053366Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:33:33.137396 env[1047]: time="2023-10-02T19:33:33.134128656Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:33:33.151649 systemd[1]: Started containerd.service. Oct 2 19:33:33.157608 env[1047]: time="2023-10-02T19:33:33.157580212Z" level=info msg="containerd successfully booted in 0.172264s" Oct 2 19:33:33.158147 tar[1045]: ./vlan Oct 2 19:33:33.198650 tar[1045]: ./portmap Oct 2 19:33:33.236979 tar[1045]: ./host-local Oct 2 19:33:33.270740 tar[1045]: ./vrf Oct 2 19:33:33.305930 tar[1045]: ./bridge Oct 2 19:33:33.349702 tar[1045]: ./tuning Oct 2 19:33:33.385348 tar[1045]: ./firewall Oct 2 19:33:33.431956 tar[1045]: ./host-device Oct 2 19:33:33.470736 tar[1045]: ./sbr Oct 2 19:33:33.507032 tar[1045]: ./loopback Oct 2 19:33:33.522852 coreos-metadata[1030]: Oct 02 19:33:33.522 INFO Fetch successful Oct 2 19:33:33.522852 coreos-metadata[1030]: Oct 02 19:33:33.522 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:33:33.539013 coreos-metadata[1030]: Oct 02 19:33:33.538 INFO Fetch successful Oct 2 19:33:33.540702 tar[1045]: ./dhcp Oct 2 19:33:33.544385 unknown[1030]: wrote ssh authorized keys file for user: core Oct 2 19:33:33.568541 update-ssh-keys[1098]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:33:33.569164 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:33:33.602479 systemd[1]: Finished prepare-critools.service. Oct 2 19:33:33.643957 tar[1045]: ./ptp Oct 2 19:33:33.682192 tar[1045]: ./ipvlan Oct 2 19:33:33.719273 tar[1045]: ./bandwidth Oct 2 19:33:33.765300 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:33:33.812309 locksmithd[1090]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:33:33.893527 sshd_keygen[1063]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:33:33.930520 systemd[1]: Finished sshd-keygen.service. Oct 2 19:33:33.934881 systemd[1]: Starting issuegen.service... Oct 2 19:33:33.942164 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:33:33.942484 systemd[1]: Finished issuegen.service. Oct 2 19:33:33.946347 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:33:33.995146 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:33:33.999213 systemd[1]: Started getty@tty1.service. Oct 2 19:33:34.003799 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:33:34.005462 systemd[1]: Reached target getty.target. Oct 2 19:33:34.006862 systemd[1]: Reached target multi-user.target. Oct 2 19:33:34.010519 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:33:34.028739 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:33:34.029086 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:33:34.030738 systemd[1]: Startup finished in 958ms (kernel) + 12.095s (initrd) + 9.171s (userspace) = 22.226s. Oct 2 19:33:41.809449 systemd[1]: Created slice system-sshd.slice. Oct 2 19:33:41.812482 systemd[1]: Started sshd@0-172.24.4.203:22-172.24.4.1:35718.service. Oct 2 19:33:43.238202 sshd[1120]: Accepted publickey for core from 172.24.4.1 port 35718 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:33:43.317831 sshd[1120]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:43.471800 systemd-logind[1041]: New session 1 of user core. Oct 2 19:33:43.475470 systemd[1]: Created slice user-500.slice. Oct 2 19:33:43.477869 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:33:43.526229 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:33:43.529342 systemd[1]: Starting user@500.service... Oct 2 19:33:43.538768 (systemd)[1123]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:43.669344 systemd[1123]: Queued start job for default target default.target. Oct 2 19:33:43.671843 systemd[1123]: Reached target paths.target. Oct 2 19:33:43.672091 systemd[1123]: Reached target sockets.target. Oct 2 19:33:43.672285 systemd[1123]: Reached target timers.target. Oct 2 19:33:43.672439 systemd[1123]: Reached target basic.target. Oct 2 19:33:43.672684 systemd[1123]: Reached target default.target. Oct 2 19:33:43.672880 systemd[1123]: Startup finished in 120ms. Oct 2 19:33:43.673011 systemd[1]: Started user@500.service. Oct 2 19:33:43.675684 systemd[1]: Started session-1.scope. Oct 2 19:33:44.024542 systemd[1]: Started sshd@1-172.24.4.203:22-172.24.4.1:35730.service. Oct 2 19:33:45.231185 sshd[1132]: Accepted publickey for core from 172.24.4.1 port 35730 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:33:45.233994 sshd[1132]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:45.246265 systemd[1]: Started session-2.scope. Oct 2 19:33:45.247371 systemd-logind[1041]: New session 2 of user core. Oct 2 19:33:45.800754 sshd[1132]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:45.808009 systemd[1]: Started sshd@2-172.24.4.203:22-172.24.4.1:57154.service. Oct 2 19:33:45.818508 systemd[1]: sshd@1-172.24.4.203:22-172.24.4.1:35730.service: Deactivated successfully. Oct 2 19:33:45.820099 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:33:45.822976 systemd-logind[1041]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:33:45.826149 systemd-logind[1041]: Removed session 2. Oct 2 19:33:47.188020 sshd[1137]: Accepted publickey for core from 172.24.4.1 port 57154 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:33:47.191062 sshd[1137]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:47.200801 systemd-logind[1041]: New session 3 of user core. Oct 2 19:33:47.201603 systemd[1]: Started session-3.scope. Oct 2 19:33:48.006441 sshd[1137]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:48.013131 systemd[1]: Started sshd@3-172.24.4.203:22-172.24.4.1:57162.service. Oct 2 19:33:48.016239 systemd[1]: sshd@2-172.24.4.203:22-172.24.4.1:57154.service: Deactivated successfully. Oct 2 19:33:48.017683 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:33:48.020770 systemd-logind[1041]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:33:48.023939 systemd-logind[1041]: Removed session 3. Oct 2 19:33:49.396248 sshd[1143]: Accepted publickey for core from 172.24.4.1 port 57162 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:33:49.399343 sshd[1143]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:49.408732 systemd-logind[1041]: New session 4 of user core. Oct 2 19:33:49.409418 systemd[1]: Started session-4.scope. Oct 2 19:33:50.077715 sshd[1143]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:50.084995 systemd[1]: Started sshd@4-172.24.4.203:22-172.24.4.1:57172.service. Oct 2 19:33:50.086166 systemd[1]: sshd@3-172.24.4.203:22-172.24.4.1:57162.service: Deactivated successfully. Oct 2 19:33:50.087476 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:33:50.091457 systemd-logind[1041]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:33:50.094217 systemd-logind[1041]: Removed session 4. Oct 2 19:33:51.597728 sshd[1149]: Accepted publickey for core from 172.24.4.1 port 57172 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:33:51.601049 sshd[1149]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:51.613947 systemd-logind[1041]: New session 5 of user core. Oct 2 19:33:51.617769 systemd[1]: Started session-5.scope. Oct 2 19:33:51.973812 sudo[1153]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:33:51.974924 sudo[1153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:33:51.985871 dbus-daemon[1031]: \xd0͉\xa6\xb5U: received setenforce notice (enforcing=-1662492688) Oct 2 19:33:51.989802 sudo[1153]: pam_unix(sudo:session): session closed for user root Oct 2 19:33:52.152358 sshd[1149]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:52.159489 systemd[1]: Started sshd@5-172.24.4.203:22-172.24.4.1:57182.service. Oct 2 19:33:52.162049 systemd[1]: sshd@4-172.24.4.203:22-172.24.4.1:57172.service: Deactivated successfully. Oct 2 19:33:52.163542 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:33:52.174260 systemd-logind[1041]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:33:52.177171 systemd-logind[1041]: Removed session 5. Oct 2 19:33:53.676396 sshd[1156]: Accepted publickey for core from 172.24.4.1 port 57182 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:33:53.679053 sshd[1156]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:53.690494 systemd-logind[1041]: New session 6 of user core. Oct 2 19:33:53.691242 systemd[1]: Started session-6.scope. Oct 2 19:33:54.231538 sudo[1161]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:33:54.232783 sudo[1161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:33:54.238982 sudo[1161]: pam_unix(sudo:session): session closed for user root Oct 2 19:33:54.248861 sudo[1160]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:33:54.249319 sudo[1160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:33:54.271273 systemd[1]: Stopping audit-rules.service... Oct 2 19:33:54.271000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:33:54.274542 kernel: kauditd_printk_skb: 129 callbacks suppressed Oct 2 19:33:54.274694 kernel: audit: type=1305 audit(1696275234.271:172): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:33:54.271000 audit[1164]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffea5573d50 a2=420 a3=0 items=0 ppid=1 pid=1164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:54.279934 auditctl[1164]: No rules Oct 2 19:33:54.290235 kernel: audit: type=1300 audit(1696275234.271:172): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffea5573d50 a2=420 a3=0 items=0 ppid=1 pid=1164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:54.281081 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:33:54.281446 systemd[1]: Stopped audit-rules.service. Oct 2 19:33:54.291708 systemd[1]: Starting audit-rules.service... Oct 2 19:33:54.271000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:33:54.307713 kernel: audit: type=1327 audit(1696275234.271:172): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:33:54.307864 kernel: audit: type=1131 audit(1696275234.279:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.331049 augenrules[1181]: No rules Oct 2 19:33:54.333025 systemd[1]: Finished audit-rules.service. Oct 2 19:33:54.338912 kernel: audit: type=1130 audit(1696275234.331:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.339081 kernel: audit: type=1106 audit(1696275234.334:175): pid=1160 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.334000 audit[1160]: USER_END pid=1160 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.335885 sudo[1160]: pam_unix(sudo:session): session closed for user root Oct 2 19:33:54.334000 audit[1160]: CRED_DISP pid=1160 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.345674 kernel: audit: type=1104 audit(1696275234.334:176): pid=1160 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.497078 sshd[1156]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:54.506193 systemd[1]: Started sshd@6-172.24.4.203:22-172.24.4.1:57194.service. Oct 2 19:33:54.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.203:22-172.24.4.1:57194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.512808 systemd[1]: sshd@5-172.24.4.203:22-172.24.4.1:57182.service: Deactivated successfully. Oct 2 19:33:54.526839 kernel: audit: type=1130 audit(1696275234.506:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.203:22-172.24.4.1:57194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:54.515055 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:33:54.527289 systemd-logind[1041]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:33:54.507000 audit[1156]: USER_END pid=1156 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:33:54.507000 audit[1156]: CRED_DISP pid=1156 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:33:54.550862 kernel: audit: type=1106 audit(1696275234.507:178): pid=1156 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:33:54.550918 kernel: audit: type=1104 audit(1696275234.507:179): pid=1156 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:33:54.550983 systemd-logind[1041]: Removed session 6. Oct 2 19:33:54.511000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.203:22-172.24.4.1:57182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:56.032000 audit[1186]: USER_ACCT pid=1186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:33:56.033883 sshd[1186]: Accepted publickey for core from 172.24.4.1 port 57194 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:33:56.035000 audit[1186]: CRED_ACQ pid=1186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:33:56.035000 audit[1186]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2b63f3e0 a2=3 a3=0 items=0 ppid=1 pid=1186 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:56.035000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:56.037528 sshd[1186]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:56.048912 systemd[1]: Started session-7.scope. Oct 2 19:33:56.050270 systemd-logind[1041]: New session 7 of user core. Oct 2 19:33:56.061000 audit[1186]: USER_START pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:33:56.064000 audit[1189]: CRED_ACQ pid=1189 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:33:56.454000 audit[1190]: USER_ACCT pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:33:56.454000 audit[1190]: CRED_REFR pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:33:56.455230 sudo[1190]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:33:56.455469 sudo[1190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:33:56.457000 audit[1190]: USER_START pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:33:57.166490 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:33:57.179808 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:33:57.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:57.181981 systemd[1]: Reached target network-online.target. Oct 2 19:33:57.185967 systemd[1]: Starting docker.service... Oct 2 19:33:57.256762 env[1206]: time="2023-10-02T19:33:57.256451964Z" level=info msg="Starting up" Oct 2 19:33:57.257622 env[1206]: time="2023-10-02T19:33:57.257545099Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:33:57.257622 env[1206]: time="2023-10-02T19:33:57.257579663Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:33:57.257622 env[1206]: time="2023-10-02T19:33:57.257605165Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:33:57.257622 env[1206]: time="2023-10-02T19:33:57.257617331Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:33:57.260547 env[1206]: time="2023-10-02T19:33:57.260496063Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:33:57.260547 env[1206]: time="2023-10-02T19:33:57.260517400Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:33:57.260547 env[1206]: time="2023-10-02T19:33:57.260532900Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:33:57.260547 env[1206]: time="2023-10-02T19:33:57.260542542Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:33:57.274067 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2461041267-merged.mount: Deactivated successfully. Oct 2 19:33:57.312221 env[1206]: time="2023-10-02T19:33:57.312189792Z" level=info msg="Loading containers: start." Oct 2 19:33:57.399000 audit[1237]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1237 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.399000 audit[1237]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc18847fc0 a2=0 a3=7ffc18847fac items=0 ppid=1206 pid=1237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.399000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:33:57.401000 audit[1239]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.401000 audit[1239]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdb3b956b0 a2=0 a3=7ffdb3b9569c items=0 ppid=1206 pid=1239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.401000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:33:57.403000 audit[1241]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.403000 audit[1241]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff67541cd0 a2=0 a3=7fff67541cbc items=0 ppid=1206 pid=1241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.403000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:33:57.404000 audit[1243]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.404000 audit[1243]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff8eefc500 a2=0 a3=7fff8eefc4ec items=0 ppid=1206 pid=1243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.404000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:33:57.407000 audit[1245]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1245 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.407000 audit[1245]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcd981b470 a2=0 a3=7ffcd981b45c items=0 ppid=1206 pid=1245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.407000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:33:57.421000 audit[1250]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.421000 audit[1250]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc8f3dd640 a2=0 a3=7ffc8f3dd62c items=0 ppid=1206 pid=1250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.421000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:33:57.435000 audit[1252]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.435000 audit[1252]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffeafbdde20 a2=0 a3=7ffeafbdde0c items=0 ppid=1206 pid=1252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.435000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:33:57.438000 audit[1254]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.438000 audit[1254]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd589e6fa0 a2=0 a3=7ffd589e6f8c items=0 ppid=1206 pid=1254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.438000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:33:57.439000 audit[1256]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.439000 audit[1256]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe0d569d60 a2=0 a3=7ffe0d569d4c items=0 ppid=1206 pid=1256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.439000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:33:57.449000 audit[1260]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.449000 audit[1260]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe83d6ad70 a2=0 a3=7ffe83d6ad5c items=0 ppid=1206 pid=1260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.449000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:33:57.450000 audit[1261]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.450000 audit[1261]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd68403660 a2=0 a3=7ffd6840364c items=0 ppid=1206 pid=1261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.450000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:33:57.462603 kernel: Initializing XFRM netlink socket Oct 2 19:33:57.506114 env[1206]: time="2023-10-02T19:33:57.506039689Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:33:57.545000 audit[1270]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.545000 audit[1270]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe05592fb0 a2=0 a3=7ffe05592f9c items=0 ppid=1206 pid=1270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.545000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:33:57.566000 audit[1273]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1273 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.566000 audit[1273]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe0fa457e0 a2=0 a3=7ffe0fa457cc items=0 ppid=1206 pid=1273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.566000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:33:57.570000 audit[1276]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.570000 audit[1276]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe57671940 a2=0 a3=7ffe5767192c items=0 ppid=1206 pid=1276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.570000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:33:57.572000 audit[1278]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.572000 audit[1278]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffce556a970 a2=0 a3=7ffce556a95c items=0 ppid=1206 pid=1278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.572000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:33:57.576000 audit[1280]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.576000 audit[1280]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffea2d91ec0 a2=0 a3=7ffea2d91eac items=0 ppid=1206 pid=1280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.576000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:33:57.581000 audit[1282]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.581000 audit[1282]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd3e7df830 a2=0 a3=7ffd3e7df81c items=0 ppid=1206 pid=1282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.581000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:33:57.585000 audit[1284]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.585000 audit[1284]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffde8531250 a2=0 a3=7ffde853123c items=0 ppid=1206 pid=1284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.585000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:33:57.603000 audit[1287]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.603000 audit[1287]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff22546100 a2=0 a3=7fff225460ec items=0 ppid=1206 pid=1287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.603000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:33:57.608000 audit[1289]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.608000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffdc03ba580 a2=0 a3=7ffdc03ba56c items=0 ppid=1206 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.608000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:33:57.612000 audit[1291]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.612000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffedbb1c6a0 a2=0 a3=7ffedbb1c68c items=0 ppid=1206 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.612000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:33:57.615000 audit[1293]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.615000 audit[1293]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdeda6d6b0 a2=0 a3=7ffdeda6d69c items=0 ppid=1206 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.615000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:33:57.616728 systemd-networkd[967]: docker0: Link UP Oct 2 19:33:57.627000 audit[1297]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.627000 audit[1297]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdb042c630 a2=0 a3=7ffdb042c61c items=0 ppid=1206 pid=1297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.627000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:33:57.628000 audit[1298]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:57.628000 audit[1298]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcd8e63620 a2=0 a3=7ffcd8e6360c items=0 ppid=1206 pid=1298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:57.628000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:33:57.629600 env[1206]: time="2023-10-02T19:33:57.629537416Z" level=info msg="Loading containers: done." Oct 2 19:33:57.642096 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1996848839-merged.mount: Deactivated successfully. Oct 2 19:33:57.656595 env[1206]: time="2023-10-02T19:33:57.656517111Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:33:57.656776 env[1206]: time="2023-10-02T19:33:57.656750344Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:33:57.656928 env[1206]: time="2023-10-02T19:33:57.656906141Z" level=info msg="Daemon has completed initialization" Oct 2 19:33:57.686833 systemd[1]: Started docker.service. Oct 2 19:33:57.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:57.702316 env[1206]: time="2023-10-02T19:33:57.702242117Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:33:57.724024 systemd[1]: Reloading. Oct 2 19:33:57.827095 /usr/lib/systemd/system-generators/torcx-generator[1345]: time="2023-10-02T19:33:57Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:33:57.827126 /usr/lib/systemd/system-generators/torcx-generator[1345]: time="2023-10-02T19:33:57Z" level=info msg="torcx already run" Oct 2 19:33:57.895510 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:33:57.895530 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:33:57.917685 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:33:57.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit: BPF prog-id=37 op=LOAD Oct 2 19:33:57.988000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit: BPF prog-id=38 op=LOAD Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.988000 audit: BPF prog-id=39 op=LOAD Oct 2 19:33:57.988000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:33:57.988000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:33:57.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.991000 audit: BPF prog-id=40 op=LOAD Oct 2 19:33:57.991000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit: BPF prog-id=41 op=LOAD Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.992000 audit: BPF prog-id=42 op=LOAD Oct 2 19:33:57.992000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:33:57.992000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.993000 audit: BPF prog-id=43 op=LOAD Oct 2 19:33:57.993000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:33:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.995000 audit: BPF prog-id=44 op=LOAD Oct 2 19:33:57.995000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.998000 audit: BPF prog-id=45 op=LOAD Oct 2 19:33:57.998000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit: BPF prog-id=46 op=LOAD Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:57.999000 audit: BPF prog-id=47 op=LOAD Oct 2 19:33:57.999000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:33:57.999000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.000000 audit: BPF prog-id=48 op=LOAD Oct 2 19:33:58.000000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit: BPF prog-id=49 op=LOAD Oct 2 19:33:58.001000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit: BPF prog-id=50 op=LOAD Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:58.002000 audit: BPF prog-id=51 op=LOAD Oct 2 19:33:58.002000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:33:58.002000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:33:58.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:58.011108 systemd[1]: Started kubelet.service. Oct 2 19:33:58.069120 kubelet[1391]: E1002 19:33:58.069056 1391 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:33:58.071856 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:33:58.071982 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:33:58.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:33:59.010413 env[1047]: time="2023-10-02T19:33:59.010086790Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\"" Oct 2 19:33:59.757864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3785061729.mount: Deactivated successfully. Oct 2 19:34:02.570717 env[1047]: time="2023-10-02T19:34:02.569650600Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:02.576673 env[1047]: time="2023-10-02T19:34:02.574391942Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:02.578333 env[1047]: time="2023-10-02T19:34:02.578295188Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:02.582069 env[1047]: time="2023-10-02T19:34:02.581996159Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:bb3eff7d20d94d44ffea47066a4400a70ede58abd9de01c80400817a955397b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:02.583645 env[1047]: time="2023-10-02T19:34:02.583529179Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\" returns image reference \"sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f\"" Oct 2 19:34:02.608528 env[1047]: time="2023-10-02T19:34:02.608462354Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\"" Oct 2 19:34:05.481747 env[1047]: time="2023-10-02T19:34:05.481379213Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:05.487782 env[1047]: time="2023-10-02T19:34:05.487703570Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:05.491749 env[1047]: time="2023-10-02T19:34:05.491661041Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:05.496218 env[1047]: time="2023-10-02T19:34:05.496133637Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:44d63bed8020f7610851a1a653ad7c6df83bd02ad128303de939a39997854ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:05.498355 env[1047]: time="2023-10-02T19:34:05.498287891Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\" returns image reference \"sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f\"" Oct 2 19:34:05.522861 env[1047]: time="2023-10-02T19:34:05.522807237Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\"" Oct 2 19:34:07.211473 env[1047]: time="2023-10-02T19:34:07.211384517Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:07.214702 env[1047]: time="2023-10-02T19:34:07.214650627Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:07.217501 env[1047]: time="2023-10-02T19:34:07.217433524Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:07.220919 env[1047]: time="2023-10-02T19:34:07.220868913Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:207b36120eca76bf8607682a3ee37e12b5156b921a9379d776b297ab01ca8198,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:07.222667 env[1047]: time="2023-10-02T19:34:07.222621975Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\" returns image reference \"sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a\"" Oct 2 19:34:07.243310 env[1047]: time="2023-10-02T19:34:07.243257586Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\"" Oct 2 19:34:08.174963 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:34:08.175064 kernel: audit: type=1130 audit(1696275248.167:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:08.175092 kernel: audit: type=1131 audit(1696275248.167:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:08.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:08.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:08.169241 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:34:08.169460 systemd[1]: Stopped kubelet.service. Oct 2 19:34:08.174543 systemd[1]: Started kubelet.service. Oct 2 19:34:08.180713 kernel: audit: type=1130 audit(1696275248.173:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:08.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:08.273764 kubelet[1424]: E1002 19:34:08.273666 1424 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:34:08.284372 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:34:08.284809 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:34:08.283000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:34:08.289911 kernel: audit: type=1131 audit(1696275248.283:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:34:08.787787 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3906493830.mount: Deactivated successfully. Oct 2 19:34:09.552812 env[1047]: time="2023-10-02T19:34:09.552716242Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:09.570338 env[1047]: time="2023-10-02T19:34:09.570237393Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:09.573863 env[1047]: time="2023-10-02T19:34:09.573816168Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:09.577414 env[1047]: time="2023-10-02T19:34:09.577313970Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4a23f328943342be6a3eeda75cc7a01d175bcf8b096611c97d2aa14c843cf326,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:09.579730 env[1047]: time="2023-10-02T19:34:09.579660680Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\" returns image reference \"sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2\"" Oct 2 19:34:09.604086 env[1047]: time="2023-10-02T19:34:09.604006193Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\"" Oct 2 19:34:10.258852 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2150522264.mount: Deactivated successfully. Oct 2 19:34:10.282843 env[1047]: time="2023-10-02T19:34:10.282750321Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:10.288466 env[1047]: time="2023-10-02T19:34:10.288395123Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:10.296266 env[1047]: time="2023-10-02T19:34:10.296177197Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:10.301379 env[1047]: time="2023-10-02T19:34:10.299224557Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:9001185023633d17a2f98ff69b6ff2615b8ea02a825adffa40422f51dfdcde9d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:10.301557 env[1047]: time="2023-10-02T19:34:10.301251091Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\" returns image reference \"sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517\"" Oct 2 19:34:10.325127 env[1047]: time="2023-10-02T19:34:10.325032936Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:34:11.471163 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3476896497.mount: Deactivated successfully. Oct 2 19:34:17.826967 update_engine[1042]: I1002 19:34:17.825664 1042 update_attempter.cc:505] Updating boot flags... Oct 2 19:34:18.419906 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:34:18.667004 kernel: audit: type=1130 audit(1696275258.418:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:18.667397 kernel: audit: type=1131 audit(1696275258.418:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:18.667477 kernel: audit: type=1130 audit(1696275258.423:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:18.667533 kernel: audit: type=1131 audit(1696275258.549:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:34:18.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:18.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:18.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:18.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:34:18.420397 systemd[1]: Stopped kubelet.service. Oct 2 19:34:18.730234 kubelet[1456]: E1002 19:34:18.546163 1456 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: op Oct 2 19:34:18.730234 kubelet[1456]: en /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:34:18.424453 systemd[1]: Started kubelet.service. Oct 2 19:34:18.550277 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:34:18.550404 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:34:18.762168 env[1047]: time="2023-10-02T19:34:18.761892618Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:18.769329 env[1047]: time="2023-10-02T19:34:18.769045335Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:18.775510 env[1047]: time="2023-10-02T19:34:18.775433244Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:18.780750 env[1047]: time="2023-10-02T19:34:18.780661590Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:18.783361 env[1047]: time="2023-10-02T19:34:18.783304275Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:34:18.812022 env[1047]: time="2023-10-02T19:34:18.811915239Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:34:19.623202 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4200304729.mount: Deactivated successfully. Oct 2 19:34:20.733171 env[1047]: time="2023-10-02T19:34:20.732849194Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:20.739678 env[1047]: time="2023-10-02T19:34:20.739515943Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:20.746826 env[1047]: time="2023-10-02T19:34:20.746735181Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:20.753146 env[1047]: time="2023-10-02T19:34:20.753091546Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:20.756483 env[1047]: time="2023-10-02T19:34:20.754917182Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:34:26.324894 systemd[1]: Stopped kubelet.service. Oct 2 19:34:26.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:26.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:26.334030 kernel: audit: type=1130 audit(1696275266.324:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:26.334103 kernel: audit: type=1131 audit(1696275266.324:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:26.352273 systemd[1]: Reloading. Oct 2 19:34:26.462689 /usr/lib/systemd/system-generators/torcx-generator[1547]: time="2023-10-02T19:34:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:34:26.462721 /usr/lib/systemd/system-generators/torcx-generator[1547]: time="2023-10-02T19:34:26Z" level=info msg="torcx already run" Oct 2 19:34:26.520162 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:34:26.520179 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:34:26.542221 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:34:26.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.619348 kernel: audit: type=1400 audit(1696275266.610:399): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.619451 kernel: audit: type=1400 audit(1696275266.610:400): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.624706 kernel: audit: type=1400 audit(1696275266.618:401): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.641118 kernel: audit: type=1400 audit(1696275266.618:402): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.641274 kernel: audit: type=1400 audit(1696275266.618:403): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.650178 kernel: audit: type=1400 audit(1696275266.618:404): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.650296 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.659862 kernel: audit: type=1400 audit(1696275266.618:405): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit: BPF prog-id=52 op=LOAD Oct 2 19:34:26.618000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit: BPF prog-id=53 op=LOAD Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.618000 audit: BPF prog-id=54 op=LOAD Oct 2 19:34:26.618000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:34:26.618000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:34:26.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.631000 audit: BPF prog-id=55 op=LOAD Oct 2 19:34:26.631000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:34:26.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit: BPF prog-id=56 op=LOAD Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.639000 audit: BPF prog-id=57 op=LOAD Oct 2 19:34:26.639000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:34:26.639000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:34:26.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.658000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:34:26.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.661000 audit: BPF prog-id=60 op=LOAD Oct 2 19:34:26.662000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit: BPF prog-id=61 op=LOAD Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit: BPF prog-id=64 op=LOAD Oct 2 19:34:26.663000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit: BPF prog-id=65 op=LOAD Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:26.663000 audit: BPF prog-id=66 op=LOAD Oct 2 19:34:26.663000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:34:26.663000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:34:26.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:26.680700 systemd[1]: Started kubelet.service. Oct 2 19:34:26.734251 kubelet[1594]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:34:26.734251 kubelet[1594]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:34:26.734251 kubelet[1594]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:34:26.734738 kubelet[1594]: I1002 19:34:26.734323 1594 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:34:26.735955 kubelet[1594]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:34:26.735955 kubelet[1594]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:34:26.735955 kubelet[1594]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:34:27.052678 kubelet[1594]: I1002 19:34:27.052613 1594 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 19:34:27.052678 kubelet[1594]: I1002 19:34:27.052655 1594 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:34:27.052984 kubelet[1594]: I1002 19:34:27.052912 1594 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 19:34:27.057129 kubelet[1594]: I1002 19:34:27.057093 1594 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:34:27.057886 kubelet[1594]: E1002 19:34:27.057856 1594 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.203:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.058287 kubelet[1594]: I1002 19:34:27.058261 1594 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:34:27.058467 kubelet[1594]: I1002 19:34:27.058431 1594 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:34:27.058614 kubelet[1594]: I1002 19:34:27.058498 1594 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 19:34:27.058614 kubelet[1594]: I1002 19:34:27.058514 1594 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:34:27.058614 kubelet[1594]: I1002 19:34:27.058529 1594 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 19:34:27.058987 kubelet[1594]: I1002 19:34:27.058627 1594 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:34:27.067200 kubelet[1594]: I1002 19:34:27.066955 1594 kubelet.go:381] "Attempting to sync node with API server" Oct 2 19:34:27.067200 kubelet[1594]: I1002 19:34:27.067021 1594 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:34:27.067200 kubelet[1594]: I1002 19:34:27.067042 1594 kubelet.go:281] "Adding apiserver pod source" Oct 2 19:34:27.067200 kubelet[1594]: I1002 19:34:27.067053 1594 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:34:27.069504 kubelet[1594]: I1002 19:34:27.069478 1594 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:34:27.070431 kubelet[1594]: W1002 19:34:27.070407 1594 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:34:27.071992 kubelet[1594]: I1002 19:34:27.071940 1594 server.go:1175] "Started kubelet" Oct 2 19:34:27.073839 kubelet[1594]: W1002 19:34:27.073737 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://172.24.4.203:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-f-8986abdbb8.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.072000 audit[1594]: AVC avc: denied { mac_admin } for pid=1594 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:27.072000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:34:27.072000 audit[1594]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000059d70 a1=c0004c2eb8 a2=c000059bc0 a3=25 items=0 ppid=1 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.072000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:34:27.073000 audit[1594]: AVC avc: denied { mac_admin } for pid=1594 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:27.073000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:34:27.073000 audit[1594]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007f4c20 a1=c0004c3068 a2=c00072a930 a3=25 items=0 ppid=1 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.073000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:34:27.075534 kubelet[1594]: E1002 19:34:27.075066 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.203:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-f-8986abdbb8.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.075534 kubelet[1594]: I1002 19:34:27.073946 1594 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:34:27.075534 kubelet[1594]: I1002 19:34:27.075124 1594 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:34:27.075534 kubelet[1594]: I1002 19:34:27.075199 1594 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:34:27.075903 kubelet[1594]: I1002 19:34:27.073975 1594 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:34:27.080050 kubelet[1594]: I1002 19:34:27.080007 1594 server.go:438] "Adding debug handlers to kubelet server" Oct 2 19:34:27.080986 kubelet[1594]: W1002 19:34:27.074597 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://172.24.4.203:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.081256 kubelet[1594]: E1002 19:34:27.081203 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.203:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.082010 kubelet[1594]: E1002 19:34:27.074716 1594 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-0-f-8986abdbb8.novalocal.178a615e3f1a0573", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-0-f-8986abdbb8.novalocal", UID:"ci-3510-3-0-f-8986abdbb8.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-0-f-8986abdbb8.novalocal"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 34, 27, 71903091, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 34, 27, 71903091, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.203:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.203:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:34:27.082355 kubelet[1594]: E1002 19:34:27.075037 1594 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:34:27.082355 kubelet[1594]: I1002 19:34:27.076085 1594 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:34:27.082355 kubelet[1594]: I1002 19:34:27.076157 1594 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 19:34:27.082355 kubelet[1594]: W1002 19:34:27.077442 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://172.24.4.203:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.082355 kubelet[1594]: E1002 19:34:27.081739 1594 controller.go:144] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.24.4.203:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-f-8986abdbb8.novalocal?timeout=10s": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.082709 kubelet[1594]: E1002 19:34:27.082630 1594 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:34:27.082774 kubelet[1594]: E1002 19:34:27.082719 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.203:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.083131 kubelet[1594]: E1002 19:34:27.083101 1594 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:27.088000 audit[1609]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1609 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.088000 audit[1609]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffedd137d50 a2=0 a3=7ffedd137d3c items=0 ppid=1594 pid=1609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.088000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:34:27.091000 audit[1610]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1610 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.091000 audit[1610]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe61e30180 a2=0 a3=7ffe61e3016c items=0 ppid=1594 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:34:27.099000 audit[1613]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1613 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.099000 audit[1613]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffec7ceaaf0 a2=0 a3=7ffec7ceaadc items=0 ppid=1594 pid=1613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.099000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:34:27.105000 audit[1615]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.105000 audit[1615]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc8ef55b60 a2=0 a3=7ffc8ef55b4c items=0 ppid=1594 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.105000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:34:27.117000 audit[1619]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.117000 audit[1619]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffece44f460 a2=0 a3=7ffece44f44c items=0 ppid=1594 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:34:27.120000 audit[1620]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.120000 audit[1620]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffef1937820 a2=0 a3=7ffef193780c items=0 ppid=1594 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.120000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:34:27.130000 audit[1623]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1623 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.130000 audit[1623]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffb7ecd880 a2=0 a3=7fffb7ecd86c items=0 ppid=1594 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.130000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:34:27.137809 kubelet[1594]: I1002 19:34:27.137777 1594 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 19:34:27.137946 kubelet[1594]: I1002 19:34:27.137935 1594 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 19:34:27.138043 kubelet[1594]: I1002 19:34:27.138033 1594 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:34:27.138000 audit[1627]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.138000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffe43916d30 a2=0 a3=7ffe43916d1c items=0 ppid=1594 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.138000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:34:27.139000 audit[1628]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.139000 audit[1628]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc02ea16b0 a2=0 a3=7ffc02ea169c items=0 ppid=1594 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.139000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:34:27.140000 audit[1629]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.140000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc50b879b0 a2=0 a3=7ffc50b8799c items=0 ppid=1594 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.140000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:34:27.142000 audit[1631]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.142000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcb789b400 a2=0 a3=7ffcb789b3ec items=0 ppid=1594 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.142000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:34:27.145184 kubelet[1594]: I1002 19:34:27.145166 1594 policy_none.go:49] "None policy: Start" Oct 2 19:34:27.146019 kubelet[1594]: I1002 19:34:27.145992 1594 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 19:34:27.146102 kubelet[1594]: I1002 19:34:27.146039 1594 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:34:27.145000 audit[1633]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.145000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd93c69c30 a2=0 a3=7ffd93c69c1c items=0 ppid=1594 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.145000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:34:27.148000 audit[1635]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.148000 audit[1635]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffc4f246d10 a2=0 a3=7ffc4f246cfc items=0 ppid=1594 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.148000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:34:27.150000 audit[1637]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.150000 audit[1637]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffce19faf10 a2=0 a3=7ffce19faefc items=0 ppid=1594 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.150000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:34:27.152000 audit[1639]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.152000 audit[1639]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffeeffcdba0 a2=0 a3=7ffeeffcdb8c items=0 ppid=1594 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.152000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:34:27.154606 kubelet[1594]: I1002 19:34:27.154592 1594 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:34:27.153000 audit[1640]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.153000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffca2d51140 a2=0 a3=7ffca2d5112c items=0 ppid=1594 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:34:27.154000 audit[1641]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.154000 audit[1641]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff73427ca0 a2=0 a3=7fff73427c8c items=0 ppid=1594 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:34:27.155000 audit[1642]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.155000 audit[1642]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdb393fac0 a2=0 a3=7ffdb393faac items=0 ppid=1594 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.155000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:34:27.156000 audit[1644]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.156000 audit[1644]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd760b3fb0 a2=0 a3=7ffd760b3f9c items=0 ppid=1594 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.156000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:34:27.157000 audit[1645]: NETFILTER_CFG table=nat:45 family=10 entries=1 op=nft_register_rule pid=1645 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.157000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd9055b7b0 a2=0 a3=7ffd9055b79c items=0 ppid=1594 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.157000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:34:27.158000 audit[1646]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:27.158000 audit[1646]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed477ecc0 a2=0 a3=7ffed477ecac items=0 ppid=1594 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.158000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:34:27.158000 audit[1647]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.158000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffdb53e51b0 a2=0 a3=7ffdb53e519c items=0 ppid=1594 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.158000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:34:27.164892 systemd[1]: Created slice kubepods.slice. Oct 2 19:34:27.173612 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:34:27.176284 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:34:27.176732 kubelet[1594]: E1002 19:34:27.176452 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:27.175000 audit[1649]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1649 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.175000 audit[1649]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffe88d93330 a2=0 a3=7ffe88d9331c items=0 ppid=1594 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.175000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:34:27.178637 kubelet[1594]: I1002 19:34:27.178612 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.178943 kubelet[1594]: E1002 19:34:27.178925 1594 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.203:6443/api/v1/nodes\": dial tcp 172.24.4.203:6443: connect: connection refused" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.180304 kubelet[1594]: I1002 19:34:27.180290 1594 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:34:27.178000 audit[1594]: AVC avc: denied { mac_admin } for pid=1594 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:27.178000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:34:27.178000 audit[1594]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fddb90 a1=c0004107c8 a2=c000fddb60 a3=25 items=0 ppid=1 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.178000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:34:27.180603 kubelet[1594]: I1002 19:34:27.180347 1594 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:34:27.180603 kubelet[1594]: I1002 19:34:27.180484 1594 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:34:27.182924 kubelet[1594]: E1002 19:34:27.182906 1594 eviction_manager.go:256] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:27.181000 audit[1650]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.181000 audit[1650]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe27091b70 a2=0 a3=7ffe27091b5c items=0 ppid=1594 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.181000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:34:27.182000 audit[1652]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1652 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.182000 audit[1652]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd2bf07390 a2=0 a3=7ffd2bf0737c items=0 ppid=1594 pid=1652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.182000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:34:27.184000 audit[1654]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1654 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.184000 audit[1654]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffe296c2d0 a2=0 a3=7fffe296c2bc items=0 ppid=1594 pid=1654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.184000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:34:27.186000 audit[1656]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1656 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.186000 audit[1656]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffec8d47620 a2=0 a3=7ffec8d4760c items=0 ppid=1594 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.186000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:34:27.189000 audit[1658]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1658 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.189000 audit[1658]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffd782f3400 a2=0 a3=7ffd782f33ec items=0 ppid=1594 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.189000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:34:27.191000 audit[1660]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1660 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.191000 audit[1660]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffe87e88870 a2=0 a3=7ffe87e8885c items=0 ppid=1594 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:34:27.195000 audit[1662]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1662 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.195000 audit[1662]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffdf95c53d0 a2=0 a3=7ffdf95c53bc items=0 ppid=1594 pid=1662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:34:27.197719 kubelet[1594]: I1002 19:34:27.197702 1594 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:34:27.197818 kubelet[1594]: I1002 19:34:27.197807 1594 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 19:34:27.197898 kubelet[1594]: I1002 19:34:27.197885 1594 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 19:34:27.198057 kubelet[1594]: E1002 19:34:27.198045 1594 kubelet.go:2034] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:34:27.198679 kubelet[1594]: W1002 19:34:27.198643 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://172.24.4.203:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.198771 kubelet[1594]: E1002 19:34:27.198760 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.203:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.197000 audit[1663]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1663 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.197000 audit[1663]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe11628bc0 a2=0 a3=7ffe11628bac items=0 ppid=1594 pid=1663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.197000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:34:27.198000 audit[1664]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1664 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.198000 audit[1664]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc1ca9d90 a2=0 a3=7ffdc1ca9d7c items=0 ppid=1594 pid=1664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.198000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:34:27.199000 audit[1665]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1665 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:27.199000 audit[1665]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff0355a30 a2=0 a3=7ffff0355a1c items=0 ppid=1594 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.199000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:34:27.277511 kubelet[1594]: E1002 19:34:27.277458 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:27.283263 kubelet[1594]: E1002 19:34:27.283209 1594 controller.go:144] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.24.4.203:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-f-8986abdbb8.novalocal?timeout=10s": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.298651 kubelet[1594]: I1002 19:34:27.298608 1594 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:27.301296 kubelet[1594]: I1002 19:34:27.301235 1594 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:27.305949 kubelet[1594]: I1002 19:34:27.304212 1594 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:27.306531 kubelet[1594]: I1002 19:34:27.304975 1594 status_manager.go:667] "Failed to get status for pod" podUID=3a3a2cc4923d9c6c0e11506e2d513f33 pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" err="Get \"https://172.24.4.203:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\": dial tcp 172.24.4.203:6443: connect: connection refused" Oct 2 19:34:27.315871 systemd[1]: Created slice kubepods-burstable-pod3a3a2cc4923d9c6c0e11506e2d513f33.slice. Oct 2 19:34:27.324614 kubelet[1594]: I1002 19:34:27.324423 1594 status_manager.go:667] "Failed to get status for pod" podUID=9a4d4f2d17310c6197dd4a82fcb170e3 pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" err="Get \"https://172.24.4.203:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\": dial tcp 172.24.4.203:6443: connect: connection refused" Oct 2 19:34:27.326712 kubelet[1594]: I1002 19:34:27.326667 1594 status_manager.go:667] "Failed to get status for pod" podUID=95ec8cbc18befd8f7eb59912c9782877 pod="kube-system/kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal" err="Get \"https://172.24.4.203:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal\": dial tcp 172.24.4.203:6443: connect: connection refused" Oct 2 19:34:27.338051 systemd[1]: Created slice kubepods-burstable-pod9a4d4f2d17310c6197dd4a82fcb170e3.slice. Oct 2 19:34:27.347547 systemd[1]: Created slice kubepods-burstable-pod95ec8cbc18befd8f7eb59912c9782877.slice. Oct 2 19:34:27.378558 kubelet[1594]: E1002 19:34:27.378509 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:27.382190 kubelet[1594]: I1002 19:34:27.382150 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.383456 kubelet[1594]: I1002 19:34:27.383410 1594 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/95ec8cbc18befd8f7eb59912c9782877-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"95ec8cbc18befd8f7eb59912c9782877\") " pod="kube-system/kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.383626 kubelet[1594]: I1002 19:34:27.383505 1594 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3a3a2cc4923d9c6c0e11506e2d513f33-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"3a3a2cc4923d9c6c0e11506e2d513f33\") " pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.383626 kubelet[1594]: I1002 19:34:27.383614 1594 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3a3a2cc4923d9c6c0e11506e2d513f33-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"3a3a2cc4923d9c6c0e11506e2d513f33\") " pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.383822 kubelet[1594]: I1002 19:34:27.383683 1594 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.383822 kubelet[1594]: I1002 19:34:27.383752 1594 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.383948 kubelet[1594]: I1002 19:34:27.383830 1594 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.383948 kubelet[1594]: I1002 19:34:27.383920 1594 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.384077 kubelet[1594]: I1002 19:34:27.383997 1594 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3a3a2cc4923d9c6c0e11506e2d513f33-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"3a3a2cc4923d9c6c0e11506e2d513f33\") " pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.384171 kubelet[1594]: I1002 19:34:27.384068 1594 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.384481 kubelet[1594]: E1002 19:34:27.384435 1594 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.203:6443/api/v1/nodes\": dial tcp 172.24.4.203:6443: connect: connection refused" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.478885 kubelet[1594]: E1002 19:34:27.478810 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:27.579344 kubelet[1594]: E1002 19:34:27.579172 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:27.631812 env[1047]: time="2023-10-02T19:34:27.631497999Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal,Uid:3a3a2cc4923d9c6c0e11506e2d513f33,Namespace:kube-system,Attempt:0,}" Oct 2 19:34:27.646031 env[1047]: time="2023-10-02T19:34:27.645964362Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal,Uid:9a4d4f2d17310c6197dd4a82fcb170e3,Namespace:kube-system,Attempt:0,}" Oct 2 19:34:27.654147 env[1047]: time="2023-10-02T19:34:27.654009090Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal,Uid:95ec8cbc18befd8f7eb59912c9782877,Namespace:kube-system,Attempt:0,}" Oct 2 19:34:27.679400 kubelet[1594]: E1002 19:34:27.679337 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:27.684303 kubelet[1594]: E1002 19:34:27.684173 1594 controller.go:144] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.24.4.203:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-f-8986abdbb8.novalocal?timeout=10s": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:27.780329 kubelet[1594]: E1002 19:34:27.780272 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:27.787991 kubelet[1594]: I1002 19:34:27.787331 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.787991 kubelet[1594]: E1002 19:34:27.787953 1594 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.203:6443/api/v1/nodes\": dial tcp 172.24.4.203:6443: connect: connection refused" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:27.881838 kubelet[1594]: E1002 19:34:27.881039 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:27.982284 kubelet[1594]: E1002 19:34:27.982224 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.083421 kubelet[1594]: E1002 19:34:28.083227 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.184486 kubelet[1594]: E1002 19:34:28.184436 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.231952 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3432380632.mount: Deactivated successfully. Oct 2 19:34:28.243529 env[1047]: time="2023-10-02T19:34:28.243428184Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.248404 kubelet[1594]: W1002 19:34:28.248341 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://172.24.4.203:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:28.248553 kubelet[1594]: E1002 19:34:28.248415 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.203:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:28.254098 env[1047]: time="2023-10-02T19:34:28.254039777Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.256217 env[1047]: time="2023-10-02T19:34:28.256130358Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.260079 env[1047]: time="2023-10-02T19:34:28.260028477Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.262024 env[1047]: time="2023-10-02T19:34:28.261973794Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.265145 env[1047]: time="2023-10-02T19:34:28.265094372Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.269628 env[1047]: time="2023-10-02T19:34:28.269517629Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.278091 env[1047]: time="2023-10-02T19:34:28.278039531Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.283108 env[1047]: time="2023-10-02T19:34:28.283033431Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.284892 kubelet[1594]: E1002 19:34:28.284843 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.286335 env[1047]: time="2023-10-02T19:34:28.286267472Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.289339 env[1047]: time="2023-10-02T19:34:28.289266671Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.291254 env[1047]: time="2023-10-02T19:34:28.291160922Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:28.339787 env[1047]: time="2023-10-02T19:34:28.338550536Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:34:28.339787 env[1047]: time="2023-10-02T19:34:28.338715557Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:34:28.339787 env[1047]: time="2023-10-02T19:34:28.338763156Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:34:28.339787 env[1047]: time="2023-10-02T19:34:28.339489992Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5164fd831055a05748a6b89906ce4db23eb93406f21d59577375489c4090675b pid=1673 runtime=io.containerd.runc.v2 Oct 2 19:34:28.385843 kubelet[1594]: E1002 19:34:28.385807 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.387611 env[1047]: time="2023-10-02T19:34:28.386140295Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:34:28.387611 env[1047]: time="2023-10-02T19:34:28.386238701Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:34:28.387611 env[1047]: time="2023-10-02T19:34:28.386271052Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:34:28.387611 env[1047]: time="2023-10-02T19:34:28.386503669Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4324f0a14f8639901f7973621fcb65d137562e30a197cd97d259daab67d0fbda pid=1701 runtime=io.containerd.runc.v2 Oct 2 19:34:28.390811 systemd[1]: Started cri-containerd-5164fd831055a05748a6b89906ce4db23eb93406f21d59577375489c4090675b.scope. Oct 2 19:34:28.405879 env[1047]: time="2023-10-02T19:34:28.405803777Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:34:28.406149 env[1047]: time="2023-10-02T19:34:28.406121866Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:34:28.406316 env[1047]: time="2023-10-02T19:34:28.406276907Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:34:28.406629 env[1047]: time="2023-10-02T19:34:28.406592190Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4e2249db6d05e1c5a59314a7b145d4dcaa1057e75d8b1495973ea391638ac2e7 pid=1711 runtime=io.containerd.runc.v2 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.410000 audit: BPF prog-id=67 op=LOAD Oct 2 19:34:28.413303 kubelet[1594]: W1002 19:34:28.412774 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://172.24.4.203:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-f-8986abdbb8.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:28.413303 kubelet[1594]: E1002 19:34:28.412828 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.203:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-f-8986abdbb8.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1673 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363466643833313035356130353734386136623839393036636534 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1673 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363466643833313035356130353734386136623839393036636534 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.412000 audit: BPF prog-id=68 op=LOAD Oct 2 19:34:28.412000 audit[1685]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003e6600 items=0 ppid=1673 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363466643833313035356130353734386136623839393036636534 Oct 2 19:34:28.413000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.413000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.413000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.413000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.413000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.413000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.413000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.413000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.413000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.413000 audit: BPF prog-id=69 op=LOAD Oct 2 19:34:28.413000 audit[1685]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003e6648 items=0 ppid=1673 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363466643833313035356130353734386136623839393036636534 Oct 2 19:34:28.415000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:34:28.416000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.416000 audit: BPF prog-id=70 op=LOAD Oct 2 19:34:28.416000 audit[1685]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003e6a58 items=0 ppid=1673 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.416000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363466643833313035356130353734386136623839393036636534 Oct 2 19:34:28.440269 systemd[1]: Started cri-containerd-4324f0a14f8639901f7973621fcb65d137562e30a197cd97d259daab67d0fbda.scope. Oct 2 19:34:28.463382 systemd[1]: Started cri-containerd-4e2249db6d05e1c5a59314a7b145d4dcaa1057e75d8b1495973ea391638ac2e7.scope. Oct 2 19:34:28.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.465000 audit: BPF prog-id=71 op=LOAD Oct 2 19:34:28.468000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.468000 audit[1716]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1701 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323466306131346638363339393031663739373336323166636236 Oct 2 19:34:28.468000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.468000 audit[1716]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1701 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323466306131346638363339393031663739373336323166636236 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit: BPF prog-id=72 op=LOAD Oct 2 19:34:28.469000 audit[1716]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000025560 items=0 ppid=1701 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323466306131346638363339393031663739373336323166636236 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit: BPF prog-id=73 op=LOAD Oct 2 19:34:28.469000 audit[1716]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0000255a8 items=0 ppid=1701 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323466306131346638363339393031663739373336323166636236 Oct 2 19:34:28.469000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:34:28.469000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { perfmon } for pid=1716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit[1716]: AVC avc: denied { bpf } for pid=1716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.469000 audit: BPF prog-id=74 op=LOAD Oct 2 19:34:28.469000 audit[1716]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0000259b8 items=0 ppid=1701 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323466306131346638363339393031663739373336323166636236 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.480000 audit: BPF prog-id=75 op=LOAD Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1711 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323234396462366430356531633561353933313461376231343564 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1711 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323234396462366430356531633561353933313461376231343564 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.481000 audit: BPF prog-id=76 op=LOAD Oct 2 19:34:28.481000 audit[1740]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00036cdb0 items=0 ppid=1711 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323234396462366430356531633561353933313461376231343564 Oct 2 19:34:28.483000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.483000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.483000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.483000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.483000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.483000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.483000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.483000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.483000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.483000 audit: BPF prog-id=77 op=LOAD Oct 2 19:34:28.483000 audit[1740]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00036cdf8 items=0 ppid=1711 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323234396462366430356531633561353933313461376231343564 Oct 2 19:34:28.484000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:34:28.484000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { perfmon } for pid=1740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit[1740]: AVC avc: denied { bpf } for pid=1740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.484000 audit: BPF prog-id=78 op=LOAD Oct 2 19:34:28.484000 audit[1740]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00036d208 items=0 ppid=1711 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.487796 kubelet[1594]: E1002 19:34:28.485538 1594 controller.go:144] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.24.4.203:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-f-8986abdbb8.novalocal?timeout=10s": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:28.487895 kubelet[1594]: E1002 19:34:28.487859 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323234396462366430356531633561353933313461376231343564 Oct 2 19:34:28.492681 kubelet[1594]: W1002 19:34:28.492532 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://172.24.4.203:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:28.492681 kubelet[1594]: E1002 19:34:28.492635 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.203:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:28.497786 env[1047]: time="2023-10-02T19:34:28.497734158Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal,Uid:3a3a2cc4923d9c6c0e11506e2d513f33,Namespace:kube-system,Attempt:0,} returns sandbox id \"5164fd831055a05748a6b89906ce4db23eb93406f21d59577375489c4090675b\"" Oct 2 19:34:28.501656 env[1047]: time="2023-10-02T19:34:28.501628019Z" level=info msg="CreateContainer within sandbox \"5164fd831055a05748a6b89906ce4db23eb93406f21d59577375489c4090675b\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:34:28.507546 kubelet[1594]: W1002 19:34:28.506822 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://172.24.4.203:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:28.507546 kubelet[1594]: E1002 19:34:28.506889 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.203:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:28.525862 env[1047]: time="2023-10-02T19:34:28.525797603Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal,Uid:9a4d4f2d17310c6197dd4a82fcb170e3,Namespace:kube-system,Attempt:0,} returns sandbox id \"4324f0a14f8639901f7973621fcb65d137562e30a197cd97d259daab67d0fbda\"" Oct 2 19:34:28.528409 env[1047]: time="2023-10-02T19:34:28.528376061Z" level=info msg="CreateContainer within sandbox \"4324f0a14f8639901f7973621fcb65d137562e30a197cd97d259daab67d0fbda\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:34:28.536337 env[1047]: time="2023-10-02T19:34:28.536294510Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal,Uid:95ec8cbc18befd8f7eb59912c9782877,Namespace:kube-system,Attempt:0,} returns sandbox id \"4e2249db6d05e1c5a59314a7b145d4dcaa1057e75d8b1495973ea391638ac2e7\"" Oct 2 19:34:28.538946 env[1047]: time="2023-10-02T19:34:28.538919095Z" level=info msg="CreateContainer within sandbox \"4e2249db6d05e1c5a59314a7b145d4dcaa1057e75d8b1495973ea391638ac2e7\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:34:28.586834 env[1047]: time="2023-10-02T19:34:28.586751300Z" level=info msg="CreateContainer within sandbox \"4324f0a14f8639901f7973621fcb65d137562e30a197cd97d259daab67d0fbda\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"572d78ad85a7872c0aad065b86270b546d9cd34c1cb93b5b6a7608aabd290da1\"" Oct 2 19:34:28.589181 kubelet[1594]: E1002 19:34:28.588684 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.592288 env[1047]: time="2023-10-02T19:34:28.592224450Z" level=info msg="StartContainer for \"572d78ad85a7872c0aad065b86270b546d9cd34c1cb93b5b6a7608aabd290da1\"" Oct 2 19:34:28.599338 kubelet[1594]: I1002 19:34:28.598148 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:28.599338 kubelet[1594]: E1002 19:34:28.599238 1594 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.203:6443/api/v1/nodes\": dial tcp 172.24.4.203:6443: connect: connection refused" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:28.613822 env[1047]: time="2023-10-02T19:34:28.613682316Z" level=info msg="CreateContainer within sandbox \"5164fd831055a05748a6b89906ce4db23eb93406f21d59577375489c4090675b\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"3d8fd0f1aad3fa79f1b0702b098e2b0ae59ca8b490b35f060865680287ad23c6\"" Oct 2 19:34:28.615364 env[1047]: time="2023-10-02T19:34:28.615292144Z" level=info msg="StartContainer for \"3d8fd0f1aad3fa79f1b0702b098e2b0ae59ca8b490b35f060865680287ad23c6\"" Oct 2 19:34:28.619688 env[1047]: time="2023-10-02T19:34:28.619500206Z" level=info msg="CreateContainer within sandbox \"4e2249db6d05e1c5a59314a7b145d4dcaa1057e75d8b1495973ea391638ac2e7\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e6a9e2a1ef92f0ccb994562303fe1e279e13e2ca386e8ec3876196f601b77002\"" Oct 2 19:34:28.620927 env[1047]: time="2023-10-02T19:34:28.620885099Z" level=info msg="StartContainer for \"e6a9e2a1ef92f0ccb994562303fe1e279e13e2ca386e8ec3876196f601b77002\"" Oct 2 19:34:28.645074 systemd[1]: Started cri-containerd-572d78ad85a7872c0aad065b86270b546d9cd34c1cb93b5b6a7608aabd290da1.scope. Oct 2 19:34:28.659329 systemd[1]: Started cri-containerd-3d8fd0f1aad3fa79f1b0702b098e2b0ae59ca8b490b35f060865680287ad23c6.scope. Oct 2 19:34:28.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.668000 audit: BPF prog-id=79 op=LOAD Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1701 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537326437386164383561373837326330616164303635623836323730 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=1701 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537326437386164383561373837326330616164303635623836323730 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit: BPF prog-id=80 op=LOAD Oct 2 19:34:28.670000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00021d750 items=0 ppid=1701 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537326437386164383561373837326330616164303635623836323730 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit: BPF prog-id=81 op=LOAD Oct 2 19:34:28.670000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00021d798 items=0 ppid=1701 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537326437386164383561373837326330616164303635623836323730 Oct 2 19:34:28.670000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:34:28.670000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.670000 audit: BPF prog-id=82 op=LOAD Oct 2 19:34:28.670000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00021dba8 items=0 ppid=1701 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537326437386164383561373837326330616164303635623836323730 Oct 2 19:34:28.679822 systemd[1]: Started cri-containerd-e6a9e2a1ef92f0ccb994562303fe1e279e13e2ca386e8ec3876196f601b77002.scope. Oct 2 19:34:28.688855 kubelet[1594]: E1002 19:34:28.688827 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.693000 audit: BPF prog-id=83 op=LOAD Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386664306631616164336661373966316230373032623039386532 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386664306631616164336661373966316230373032623039386532 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit: BPF prog-id=84 op=LOAD Oct 2 19:34:28.694000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000220e20 items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386664306631616164336661373966316230373032623039386532 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit: BPF prog-id=85 op=LOAD Oct 2 19:34:28.694000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000220e68 items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386664306631616164336661373966316230373032623039386532 Oct 2 19:34:28.694000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:34:28.694000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.694000 audit: BPF prog-id=86 op=LOAD Oct 2 19:34:28.694000 audit[1816]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000221278 items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386664306631616164336661373966316230373032623039386532 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.708000 audit: BPF prog-id=87 op=LOAD Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1711 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613965326131656639326630636362393934353632333033666531 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1711 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613965326131656639326630636362393934353632333033666531 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit: BPF prog-id=88 op=LOAD Oct 2 19:34:28.709000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003dc260 items=0 ppid=1711 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613965326131656639326630636362393934353632333033666531 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit: BPF prog-id=89 op=LOAD Oct 2 19:34:28.709000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003dc2a8 items=0 ppid=1711 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613965326131656639326630636362393934353632333033666531 Oct 2 19:34:28.709000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:34:28.709000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { perfmon } for pid=1839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit[1839]: AVC avc: denied { bpf } for pid=1839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:28.709000 audit: BPF prog-id=90 op=LOAD Oct 2 19:34:28.709000 audit[1839]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003dc6b8 items=0 ppid=1711 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613965326131656639326630636362393934353632333033666531 Oct 2 19:34:28.747080 env[1047]: time="2023-10-02T19:34:28.747004142Z" level=info msg="StartContainer for \"572d78ad85a7872c0aad065b86270b546d9cd34c1cb93b5b6a7608aabd290da1\" returns successfully" Oct 2 19:34:28.775223 env[1047]: time="2023-10-02T19:34:28.775168237Z" level=info msg="StartContainer for \"e6a9e2a1ef92f0ccb994562303fe1e279e13e2ca386e8ec3876196f601b77002\" returns successfully" Oct 2 19:34:28.781224 env[1047]: time="2023-10-02T19:34:28.780902518Z" level=info msg="StartContainer for \"3d8fd0f1aad3fa79f1b0702b098e2b0ae59ca8b490b35f060865680287ad23c6\" returns successfully" Oct 2 19:34:28.788979 kubelet[1594]: E1002 19:34:28.788937 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.889901 kubelet[1594]: E1002 19:34:28.889861 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:28.990690 kubelet[1594]: E1002 19:34:28.990528 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.090950 kubelet[1594]: E1002 19:34:29.090910 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.191775 kubelet[1594]: E1002 19:34:29.191743 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.194537 kubelet[1594]: E1002 19:34:29.194501 1594 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.203:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.203:6443: connect: connection refused Oct 2 19:34:29.212727 kubelet[1594]: I1002 19:34:29.212709 1594 status_manager.go:667] "Failed to get status for pod" podUID=9a4d4f2d17310c6197dd4a82fcb170e3 pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" err="Get \"https://172.24.4.203:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\": dial tcp 172.24.4.203:6443: connect: connection refused" Oct 2 19:34:29.225636 kubelet[1594]: I1002 19:34:29.225602 1594 status_manager.go:667] "Failed to get status for pod" podUID=95ec8cbc18befd8f7eb59912c9782877 pod="kube-system/kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal" err="Get \"https://172.24.4.203:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal\": dial tcp 172.24.4.203:6443: connect: connection refused" Oct 2 19:34:29.268473 kubelet[1594]: I1002 19:34:29.268409 1594 status_manager.go:667] "Failed to get status for pod" podUID=3a3a2cc4923d9c6c0e11506e2d513f33 pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" err="Get \"https://172.24.4.203:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\": dial tcp 172.24.4.203:6443: connect: connection refused" Oct 2 19:34:29.292465 kubelet[1594]: E1002 19:34:29.292451 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.393185 kubelet[1594]: E1002 19:34:29.393155 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.493999 kubelet[1594]: E1002 19:34:29.493972 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.595021 kubelet[1594]: E1002 19:34:29.594937 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.695864 kubelet[1594]: E1002 19:34:29.695840 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.796687 kubelet[1594]: E1002 19:34:29.796666 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.897807 kubelet[1594]: E1002 19:34:29.897731 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:29.998650 kubelet[1594]: E1002 19:34:29.998614 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:30.098938 kubelet[1594]: E1002 19:34:30.098917 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:30.200751 kubelet[1594]: E1002 19:34:30.200735 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:30.201263 kubelet[1594]: I1002 19:34:30.201171 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:30.301336 kubelet[1594]: E1002 19:34:30.301303 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:30.401967 kubelet[1594]: E1002 19:34:30.401930 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:30.497000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:30.497000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ea28d0 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:34:30.497000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:30.498000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:30.498000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000eb88c0 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:34:30.498000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:30.503003 kubelet[1594]: E1002 19:34:30.502985 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:30.603830 kubelet[1594]: E1002 19:34:30.603790 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:30.704226 kubelet[1594]: E1002 19:34:30.704203 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:30.805176 kubelet[1594]: E1002 19:34:30.805096 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:30.905588 kubelet[1594]: E1002 19:34:30.905552 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.006453 kubelet[1594]: E1002 19:34:31.006430 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.107698 kubelet[1594]: E1002 19:34:31.107612 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.208948 kubelet[1594]: E1002 19:34:31.208915 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.310031 kubelet[1594]: E1002 19:34:31.309998 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.411047 kubelet[1594]: E1002 19:34:31.410901 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.511719 kubelet[1594]: E1002 19:34:31.511688 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.612594 kubelet[1594]: E1002 19:34:31.612550 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.713897 kubelet[1594]: E1002 19:34:31.713847 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.815026 kubelet[1594]: E1002 19:34:31.814965 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:31.916733 kubelet[1594]: E1002 19:34:31.916702 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.017748 kubelet[1594]: E1002 19:34:32.017586 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.117923 kubelet[1594]: E1002 19:34:32.117846 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.182316 kubelet[1594]: E1002 19:34:32.182251 1594 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:32.218670 kubelet[1594]: E1002 19:34:32.218541 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.319134 kubelet[1594]: E1002 19:34:32.318997 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.419546 kubelet[1594]: E1002 19:34:32.419347 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.519821 kubelet[1594]: E1002 19:34:32.519765 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.620925 kubelet[1594]: E1002 19:34:32.620809 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.721725 kubelet[1594]: E1002 19:34:32.721695 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.822775 kubelet[1594]: E1002 19:34:32.822708 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:32.866757 kernel: kauditd_printk_skb: 686 callbacks suppressed Oct 2 19:34:32.866955 kernel: audit: type=1400 audit(1696275272.862:687): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:32.862000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:32.862000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00255c240 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:34:32.875120 kernel: audit: type=1300 audit(1696275272.862:687): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00255c240 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:34:32.875247 kernel: audit: type=1327 audit(1696275272.862:687): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:34:32.862000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:34:32.880944 kernel: audit: type=1400 audit(1696275272.863:688): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525615 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:32.863000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525615 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:32.885623 kernel: audit: type=1300 audit(1696275272.863:688): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c007dda0c0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:34:32.863000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c007dda0c0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:34:32.863000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:34:32.896601 kernel: audit: type=1327 audit(1696275272.863:688): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:34:32.896698 kernel: audit: type=1400 audit(1696275272.863:689): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:32.863000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:32.863000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c007dda0f0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:34:32.906702 kernel: audit: type=1300 audit(1696275272.863:689): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c007dda0f0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:34:32.906842 kernel: audit: type=1327 audit(1696275272.863:689): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:34:32.863000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:34:32.877000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525621 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:32.918549 kernel: audit: type=1400 audit(1696275272.877:690): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525621 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:32.877000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c007dda390 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:34:32.877000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:34:32.923971 kubelet[1594]: E1002 19:34:32.923919 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:33.024978 kubelet[1594]: E1002 19:34:33.024932 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:33.043000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:33.043000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c001a01d80 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:34:33.043000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:34:33.043000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:33.043000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c0083a4900 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:34:33.043000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:34:33.075977 kubelet[1594]: I1002 19:34:33.075944 1594 apiserver.go:52] "Watching apiserver" Oct 2 19:34:33.125160 kubelet[1594]: E1002 19:34:33.125126 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:33.157120 kubelet[1594]: E1002 19:34:33.157028 1594 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:33.225646 kubelet[1594]: E1002 19:34:33.225617 1594 kubelet.go:2448] "Error getting node" err="node \"ci-3510-3-0-f-8986abdbb8.novalocal\" not found" Oct 2 19:34:33.229848 kubelet[1594]: I1002 19:34:33.229795 1594 reconciler.go:169] "Reconciler: start to sync state" Oct 2 19:34:33.258419 kubelet[1594]: I1002 19:34:33.258378 1594 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:36.395125 systemd[1]: Reloading. Oct 2 19:34:36.536879 /usr/lib/systemd/system-generators/torcx-generator[1923]: time="2023-10-02T19:34:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:34:36.549964 /usr/lib/systemd/system-generators/torcx-generator[1923]: time="2023-10-02T19:34:36Z" level=info msg="torcx already run" Oct 2 19:34:36.655400 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:34:36.655421 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:34:36.679252 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:34:36.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.766000 audit: BPF prog-id=91 op=LOAD Oct 2 19:34:36.766000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit: BPF prog-id=92 op=LOAD Oct 2 19:34:36.768000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit: BPF prog-id=93 op=LOAD Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.769000 audit: BPF prog-id=94 op=LOAD Oct 2 19:34:36.769000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:34:36.769000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:34:36.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.771000 audit: BPF prog-id=95 op=LOAD Oct 2 19:34:36.771000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.773000 audit: BPF prog-id=96 op=LOAD Oct 2 19:34:36.773000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit: BPF prog-id=97 op=LOAD Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit: BPF prog-id=98 op=LOAD Oct 2 19:34:36.775000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:34:36.775000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.776000 audit: BPF prog-id=99 op=LOAD Oct 2 19:34:36.776000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.777000 audit: BPF prog-id=100 op=LOAD Oct 2 19:34:36.777000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit: BPF prog-id=101 op=LOAD Oct 2 19:34:36.779000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.780000 audit: BPF prog-id=102 op=LOAD Oct 2 19:34:36.780000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:34:36.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.781000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.781000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit: BPF prog-id=103 op=LOAD Oct 2 19:34:36.782000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit: BPF prog-id=104 op=LOAD Oct 2 19:34:36.783000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit: BPF prog-id=105 op=LOAD Oct 2 19:34:36.784000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit: BPF prog-id=106 op=LOAD Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.784000 audit: BPF prog-id=107 op=LOAD Oct 2 19:34:36.784000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:34:36.784000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.785000 audit: BPF prog-id=108 op=LOAD Oct 2 19:34:36.785000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit: BPF prog-id=109 op=LOAD Oct 2 19:34:36.786000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.786000 audit: BPF prog-id=110 op=LOAD Oct 2 19:34:36.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.787000 audit: BPF prog-id=111 op=LOAD Oct 2 19:34:36.787000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:34:36.787000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:34:36.806190 kubelet[1594]: I1002 19:34:36.804245 1594 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:34:36.806690 systemd[1]: Stopping kubelet.service... Oct 2 19:34:36.820908 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:34:36.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:36.821167 systemd[1]: Stopped kubelet.service. Oct 2 19:34:36.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:36.823229 systemd[1]: Started kubelet.service. Oct 2 19:34:36.936521 kubelet[1970]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:34:36.936871 kubelet[1970]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:34:36.936951 kubelet[1970]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:34:36.937143 kubelet[1970]: I1002 19:34:36.937085 1970 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:34:36.939017 kubelet[1970]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:34:36.939097 kubelet[1970]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:34:36.939158 kubelet[1970]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:34:36.942163 kubelet[1970]: I1002 19:34:36.942144 1970 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 19:34:36.942279 kubelet[1970]: I1002 19:34:36.942268 1970 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:34:36.942591 kubelet[1970]: I1002 19:34:36.942559 1970 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 19:34:36.944761 kubelet[1970]: I1002 19:34:36.944747 1970 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:34:36.945744 kubelet[1970]: I1002 19:34:36.945702 1970 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:34:36.948143 kubelet[1970]: I1002 19:34:36.948129 1970 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:34:36.948387 kubelet[1970]: I1002 19:34:36.948375 1970 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:34:36.948509 kubelet[1970]: I1002 19:34:36.948498 1970 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 19:34:36.948652 kubelet[1970]: I1002 19:34:36.948641 1970 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:34:36.948716 kubelet[1970]: I1002 19:34:36.948708 1970 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 19:34:36.948804 kubelet[1970]: I1002 19:34:36.948794 1970 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:34:36.952122 kubelet[1970]: I1002 19:34:36.952104 1970 kubelet.go:381] "Attempting to sync node with API server" Oct 2 19:34:36.952271 kubelet[1970]: I1002 19:34:36.952261 1970 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:34:36.952348 kubelet[1970]: I1002 19:34:36.952338 1970 kubelet.go:281] "Adding apiserver pod source" Oct 2 19:34:36.952412 kubelet[1970]: I1002 19:34:36.952403 1970 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:34:36.964757 kubelet[1970]: I1002 19:34:36.960991 1970 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:34:36.964757 kubelet[1970]: I1002 19:34:36.961688 1970 server.go:1175] "Started kubelet" Oct 2 19:34:36.982107 kubelet[1970]: E1002 19:34:36.982086 1970 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:34:36.982252 kubelet[1970]: E1002 19:34:36.982242 1970 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:34:36.983000 audit[1970]: AVC avc: denied { mac_admin } for pid=1970 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.983000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:34:36.986116 kubelet[1970]: I1002 19:34:36.986101 1970 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:34:36.987496 kubelet[1970]: I1002 19:34:36.987480 1970 server.go:438] "Adding debug handlers to kubelet server" Oct 2 19:34:36.983000 audit[1970]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d37890 a1=c000d52f48 a2=c000d37860 a3=25 items=0 ppid=1 pid=1970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:36.983000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:34:36.990700 kubelet[1970]: I1002 19:34:36.990672 1970 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:34:36.989000 audit[1970]: AVC avc: denied { mac_admin } for pid=1970 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:36.989000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:34:36.989000 audit[1970]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d5ca00 a1=c000d52f60 a2=c000d37920 a3=25 items=0 ppid=1 pid=1970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:36.989000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:34:36.990970 kubelet[1970]: I1002 19:34:36.990762 1970 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:34:36.990970 kubelet[1970]: I1002 19:34:36.990788 1970 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:34:37.000610 kubelet[1970]: I1002 19:34:36.997902 1970 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:34:37.000610 kubelet[1970]: I1002 19:34:36.999923 1970 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 19:34:37.003087 kubelet[1970]: E1002 19:34:37.003063 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:37.031755 kubelet[1970]: I1002 19:34:37.031727 1970 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:34:37.045279 kubelet[1970]: I1002 19:34:37.045214 1970 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:34:37.045279 kubelet[1970]: I1002 19:34:37.045242 1970 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 19:34:37.045279 kubelet[1970]: I1002 19:34:37.045258 1970 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 19:34:37.045470 kubelet[1970]: E1002 19:34:37.045334 1970 kubelet.go:2034] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:34:37.071163 kubelet[1970]: I1002 19:34:37.071137 1970 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 19:34:37.071163 kubelet[1970]: I1002 19:34:37.071156 1970 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 19:34:37.071163 kubelet[1970]: I1002 19:34:37.071169 1970 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:34:37.071362 kubelet[1970]: I1002 19:34:37.071325 1970 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:34:37.071362 kubelet[1970]: I1002 19:34:37.071339 1970 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:34:37.071362 kubelet[1970]: I1002 19:34:37.071345 1970 policy_none.go:49] "None policy: Start" Oct 2 19:34:37.071810 kubelet[1970]: I1002 19:34:37.071786 1970 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 19:34:37.071810 kubelet[1970]: I1002 19:34:37.071807 1970 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:34:37.071931 kubelet[1970]: I1002 19:34:37.071912 1970 state_mem.go:75] "Updated machine memory state" Oct 2 19:34:37.075188 kubelet[1970]: I1002 19:34:37.075164 1970 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:34:37.075250 kubelet[1970]: I1002 19:34:37.075229 1970 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:34:37.073000 audit[1970]: AVC avc: denied { mac_admin } for pid=1970 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:37.073000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:34:37.073000 audit[1970]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0011d79e0 a1=c001258528 a2=c0011d79b0 a3=25 items=0 ppid=1 pid=1970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:37.073000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:34:37.075487 kubelet[1970]: I1002 19:34:37.075399 1970 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:34:37.102416 kubelet[1970]: I1002 19:34:37.102388 1970 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.113048 kubelet[1970]: I1002 19:34:37.113023 1970 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.113289 kubelet[1970]: I1002 19:34:37.113278 1970 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.146144 kubelet[1970]: I1002 19:34:37.146104 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:37.146416 kubelet[1970]: I1002 19:34:37.146404 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:37.146549 kubelet[1970]: I1002 19:34:37.146536 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:37.164573 kubelet[1970]: E1002 19:34:37.164525 1970 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" already exists" pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.168119 kubelet[1970]: E1002 19:34:37.168104 1970 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal\" already exists" pod="kube-system/kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.202194 kubelet[1970]: I1002 19:34:37.202113 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3a3a2cc4923d9c6c0e11506e2d513f33-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"3a3a2cc4923d9c6c0e11506e2d513f33\") " pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.202365 kubelet[1970]: I1002 19:34:37.202353 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.202481 kubelet[1970]: I1002 19:34:37.202468 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.202619 kubelet[1970]: I1002 19:34:37.202606 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.202794 kubelet[1970]: I1002 19:34:37.202783 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/95ec8cbc18befd8f7eb59912c9782877-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"95ec8cbc18befd8f7eb59912c9782877\") " pod="kube-system/kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.202933 kubelet[1970]: I1002 19:34:37.202923 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3a3a2cc4923d9c6c0e11506e2d513f33-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"3a3a2cc4923d9c6c0e11506e2d513f33\") " pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.203066 kubelet[1970]: I1002 19:34:37.203056 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3a3a2cc4923d9c6c0e11506e2d513f33-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"3a3a2cc4923d9c6c0e11506e2d513f33\") " pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.203201 kubelet[1970]: I1002 19:34:37.203191 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.203338 kubelet[1970]: I1002 19:34:37.203327 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/9a4d4f2d17310c6197dd4a82fcb170e3-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" (UID: \"9a4d4f2d17310c6197dd4a82fcb170e3\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.358857 kubelet[1970]: E1002 19:34:37.358831 1970 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:37.359000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:37.359000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00076b920 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:34:37.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:37.360000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:37.360000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00076ba80 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:34:37.360000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:37.362000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:37.362000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00076bbe0 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:34:37.362000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:37.364000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:37.364000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e728c0 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:34:37.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:37.960401 kubelet[1970]: I1002 19:34:37.960347 1970 apiserver.go:52] "Watching apiserver" Oct 2 19:34:38.211092 kubelet[1970]: I1002 19:34:38.210931 1970 reconciler.go:169] "Reconciler: start to sync state" Oct 2 19:34:38.371879 kubelet[1970]: E1002 19:34:38.371853 1970 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal\" already exists" pod="kube-system/kube-scheduler-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:38.835615 kubelet[1970]: E1002 19:34:38.835570 1970 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal\" already exists" pod="kube-system/kube-controller-manager-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:38.966274 kubelet[1970]: E1002 19:34:38.966224 1970 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:34:40.074453 kernel: kauditd_printk_skb: 278 callbacks suppressed Oct 2 19:34:40.074597 kernel: audit: type=1400 audit(1696275280.067:946): avc: denied { watch } for pid=1832 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525646 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:34:40.067000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525646 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:34:40.067000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f06c80 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:34:40.080588 kernel: audit: type=1300 audit(1696275280.067:946): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f06c80 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:34:40.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:40.088588 kernel: audit: type=1327 audit(1696275280.067:946): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:41.453472 sudo[1190]: pam_unix(sudo:session): session closed for user root Oct 2 19:34:41.452000 audit[1190]: USER_END pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.454000 audit[1190]: CRED_DISP pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.471605 kernel: audit: type=1106 audit(1696275281.452:947): pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.471683 kernel: audit: type=1104 audit(1696275281.454:948): pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.662086 sshd[1186]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:41.662000 audit[1186]: USER_END pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:34:41.667795 systemd[1]: sshd@6-172.24.4.203:22-172.24.4.1:57194.service: Deactivated successfully. Oct 2 19:34:41.669430 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:34:41.670223 systemd[1]: session-7.scope: Consumed 7.418s CPU time. Oct 2 19:34:41.677635 kernel: audit: type=1106 audit(1696275281.662:949): pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:34:41.663000 audit[1186]: CRED_DISP pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:34:41.678413 systemd-logind[1041]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:34:41.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.203:22-172.24.4.1:57194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.697822 kernel: audit: type=1104 audit(1696275281.663:950): pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:34:41.697982 kernel: audit: type=1131 audit(1696275281.663:951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.203:22-172.24.4.1:57194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.698916 systemd-logind[1041]: Removed session 7. Oct 2 19:34:42.076582 kubelet[1970]: E1002 19:34:42.076513 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:47.078634 kubelet[1970]: E1002 19:34:47.077870 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:50.585786 kubelet[1970]: I1002 19:34:50.585746 1970 kuberuntime_manager.go:1050] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:34:50.586727 env[1047]: time="2023-10-02T19:34:50.586683540Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:34:50.587271 kubelet[1970]: I1002 19:34:50.587227 1970 kubelet_network.go:60] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:34:50.587628 kubelet[1970]: E1002 19:34:50.587607 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:50.849123 kubelet[1970]: I1002 19:34:50.849010 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:50.854410 systemd[1]: Created slice kubepods-besteffort-podca29ea66_b78e_4663_8995_1968c5df6ac6.slice. Oct 2 19:34:50.899585 kubelet[1970]: I1002 19:34:50.899543 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ca29ea66-b78e-4663-8995-1968c5df6ac6-lib-modules\") pod \"kube-proxy-6btdk\" (UID: \"ca29ea66-b78e-4663-8995-1968c5df6ac6\") " pod="kube-system/kube-proxy-6btdk" Oct 2 19:34:50.899707 kubelet[1970]: I1002 19:34:50.899611 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l7q9x\" (UniqueName: \"kubernetes.io/projected/ca29ea66-b78e-4663-8995-1968c5df6ac6-kube-api-access-l7q9x\") pod \"kube-proxy-6btdk\" (UID: \"ca29ea66-b78e-4663-8995-1968c5df6ac6\") " pod="kube-system/kube-proxy-6btdk" Oct 2 19:34:50.899707 kubelet[1970]: I1002 19:34:50.899640 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/ca29ea66-b78e-4663-8995-1968c5df6ac6-kube-proxy\") pod \"kube-proxy-6btdk\" (UID: \"ca29ea66-b78e-4663-8995-1968c5df6ac6\") " pod="kube-system/kube-proxy-6btdk" Oct 2 19:34:50.899707 kubelet[1970]: I1002 19:34:50.899666 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ca29ea66-b78e-4663-8995-1968c5df6ac6-xtables-lock\") pod \"kube-proxy-6btdk\" (UID: \"ca29ea66-b78e-4663-8995-1968c5df6ac6\") " pod="kube-system/kube-proxy-6btdk" Oct 2 19:34:51.034424 kubelet[1970]: E1002 19:34:51.034367 1970 projected.go:290] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:34:51.034424 kubelet[1970]: E1002 19:34:51.034421 1970 projected.go:196] Error preparing data for projected volume kube-api-access-l7q9x for pod kube-system/kube-proxy-6btdk: configmap "kube-root-ca.crt" not found Oct 2 19:34:51.034680 kubelet[1970]: E1002 19:34:51.034523 1970 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/ca29ea66-b78e-4663-8995-1968c5df6ac6-kube-api-access-l7q9x podName:ca29ea66-b78e-4663-8995-1968c5df6ac6 nodeName:}" failed. No retries permitted until 2023-10-02 19:34:51.534498148 +0000 UTC m=+14.706722648 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-l7q9x" (UniqueName: "kubernetes.io/projected/ca29ea66-b78e-4663-8995-1968c5df6ac6-kube-api-access-l7q9x") pod "kube-proxy-6btdk" (UID: "ca29ea66-b78e-4663-8995-1968c5df6ac6") : configmap "kube-root-ca.crt" not found Oct 2 19:34:51.285917 kubelet[1970]: I1002 19:34:51.285869 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:51.292269 systemd[1]: Created slice kubepods-besteffort-pod665a3513_125a_4deb_bb65_d00722960543.slice. Oct 2 19:34:51.303050 kubelet[1970]: I1002 19:34:51.303006 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6gjmh\" (UniqueName: \"kubernetes.io/projected/665a3513-125a-4deb-bb65-d00722960543-kube-api-access-6gjmh\") pod \"tigera-operator-64db64cb98-rmf65\" (UID: \"665a3513-125a-4deb-bb65-d00722960543\") " pod="tigera-operator/tigera-operator-64db64cb98-rmf65" Oct 2 19:34:51.303050 kubelet[1970]: I1002 19:34:51.303055 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/665a3513-125a-4deb-bb65-d00722960543-var-lib-calico\") pod \"tigera-operator-64db64cb98-rmf65\" (UID: \"665a3513-125a-4deb-bb65-d00722960543\") " pod="tigera-operator/tigera-operator-64db64cb98-rmf65" Oct 2 19:34:51.596982 env[1047]: time="2023-10-02T19:34:51.596846726Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-64db64cb98-rmf65,Uid:665a3513-125a-4deb-bb65-d00722960543,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:34:51.640204 env[1047]: time="2023-10-02T19:34:51.640023976Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:34:51.640359 env[1047]: time="2023-10-02T19:34:51.640173667Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:34:51.640359 env[1047]: time="2023-10-02T19:34:51.640268306Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:34:51.640872 env[1047]: time="2023-10-02T19:34:51.640825842Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cb8c2042c61d16b0640e492afddc87de87e873963d67599c7aef3609579b60f6 pid=2080 runtime=io.containerd.runc.v2 Oct 2 19:34:51.663676 systemd[1]: Started cri-containerd-cb8c2042c61d16b0640e492afddc87de87e873963d67599c7aef3609579b60f6.scope. Oct 2 19:34:51.706658 kernel: audit: type=1400 audit(1696275291.698:952): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.706822 kernel: audit: type=1400 audit(1696275291.698:953): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.706882 kernel: audit: type=1400 audit(1696275291.698:954): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709969 kernel: audit: type=1400 audit(1696275291.698:955): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.716840 kernel: audit: type=1400 audit(1696275291.698:956): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.716888 kernel: audit: type=1400 audit(1696275291.698:957): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.720231 kernel: audit: type=1400 audit(1696275291.698:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.727272 kernel: audit: type=1400 audit(1696275291.698:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.734021 kernel: audit: type=1400 audit(1696275291.698:960): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.737715 kernel: audit: type=1400 audit(1696275291.705:961): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit: BPF prog-id=112 op=LOAD Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2080 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362386332303432633631643136623036343065343932616664646338 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2080 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362386332303432633631643136623036343065343932616664646338 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.709000 audit: BPF prog-id=113 op=LOAD Oct 2 19:34:51.709000 audit[2090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001d2bf0 items=0 ppid=2080 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362386332303432633631643136623036343065343932616664646338 Oct 2 19:34:51.719000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.719000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.719000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.719000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.719000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.719000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.719000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.719000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.719000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.719000 audit: BPF prog-id=114 op=LOAD Oct 2 19:34:51.719000 audit[2090]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001d2c38 items=0 ppid=2080 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362386332303432633631643136623036343065343932616664646338 Oct 2 19:34:51.729000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:34:51.729000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.729000 audit: BPF prog-id=115 op=LOAD Oct 2 19:34:51.729000 audit[2090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001d3048 items=0 ppid=2080 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362386332303432633631643136623036343065343932616664646338 Oct 2 19:34:51.764719 env[1047]: time="2023-10-02T19:34:51.763305513Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-6btdk,Uid:ca29ea66-b78e-4663-8995-1968c5df6ac6,Namespace:kube-system,Attempt:0,}" Oct 2 19:34:51.776322 env[1047]: time="2023-10-02T19:34:51.776272173Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-64db64cb98-rmf65,Uid:665a3513-125a-4deb-bb65-d00722960543,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"cb8c2042c61d16b0640e492afddc87de87e873963d67599c7aef3609579b60f6\"" Oct 2 19:34:51.780260 env[1047]: time="2023-10-02T19:34:51.780228873Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:34:51.790066 env[1047]: time="2023-10-02T19:34:51.789989452Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:34:51.790196 env[1047]: time="2023-10-02T19:34:51.790080604Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:34:51.790196 env[1047]: time="2023-10-02T19:34:51.790122613Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:34:51.790520 env[1047]: time="2023-10-02T19:34:51.790470064Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/51631386471f09bb3ae39f178405fc0a3b2a53d49a960a9412a9c8dd96a3ee90 pid=2123 runtime=io.containerd.runc.v2 Oct 2 19:34:51.804139 systemd[1]: Started cri-containerd-51631386471f09bb3ae39f178405fc0a3b2a53d49a960a9412a9c8dd96a3ee90.scope. Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.815000 audit: BPF prog-id=116 op=LOAD Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2123 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363331333836343731663039626233616533396631373834303566 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2123 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363331333836343731663039626233616533396631373834303566 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.816000 audit: BPF prog-id=117 op=LOAD Oct 2 19:34:51.816000 audit[2134]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000282370 items=0 ppid=2123 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363331333836343731663039626233616533396631373834303566 Oct 2 19:34:51.817000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.817000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.817000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.817000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.817000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.817000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.817000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.817000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.817000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.817000 audit: BPF prog-id=118 op=LOAD Oct 2 19:34:51.817000 audit[2134]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0002823b8 items=0 ppid=2123 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363331333836343731663039626233616533396631373834303566 Oct 2 19:34:51.818000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:34:51.818000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.818000 audit: BPF prog-id=119 op=LOAD Oct 2 19:34:51.818000 audit[2134]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0002827c8 items=0 ppid=2123 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363331333836343731663039626233616533396631373834303566 Oct 2 19:34:51.835486 env[1047]: time="2023-10-02T19:34:51.835412941Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-6btdk,Uid:ca29ea66-b78e-4663-8995-1968c5df6ac6,Namespace:kube-system,Attempt:0,} returns sandbox id \"51631386471f09bb3ae39f178405fc0a3b2a53d49a960a9412a9c8dd96a3ee90\"" Oct 2 19:34:51.839878 env[1047]: time="2023-10-02T19:34:51.839083464Z" level=info msg="CreateContainer within sandbox \"51631386471f09bb3ae39f178405fc0a3b2a53d49a960a9412a9c8dd96a3ee90\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:34:51.868273 env[1047]: time="2023-10-02T19:34:51.864860861Z" level=info msg="CreateContainer within sandbox \"51631386471f09bb3ae39f178405fc0a3b2a53d49a960a9412a9c8dd96a3ee90\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"0ae9f4ab49b2f0069ec5c3683b563e989f561c1d9cabb1cef9c6d34d14bbdc60\"" Oct 2 19:34:51.870516 env[1047]: time="2023-10-02T19:34:51.870489241Z" level=info msg="StartContainer for \"0ae9f4ab49b2f0069ec5c3683b563e989f561c1d9cabb1cef9c6d34d14bbdc60\"" Oct 2 19:34:51.888643 systemd[1]: Started cri-containerd-0ae9f4ab49b2f0069ec5c3683b563e989f561c1d9cabb1cef9c6d34d14bbdc60.scope. Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2123 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061653966346162343962326630303639656335633336383362353633 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit: BPF prog-id=120 op=LOAD Oct 2 19:34:51.908000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000332590 items=0 ppid=2123 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061653966346162343962326630303639656335633336383362353633 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.908000 audit: BPF prog-id=121 op=LOAD Oct 2 19:34:51.908000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003325d8 items=0 ppid=2123 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061653966346162343962326630303639656335633336383362353633 Oct 2 19:34:51.909000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:34:51.909000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:51.909000 audit: BPF prog-id=122 op=LOAD Oct 2 19:34:51.909000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000332668 items=0 ppid=2123 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061653966346162343962326630303639656335633336383362353633 Oct 2 19:34:51.937182 env[1047]: time="2023-10-02T19:34:51.937089077Z" level=info msg="StartContainer for \"0ae9f4ab49b2f0069ec5c3683b563e989f561c1d9cabb1cef9c6d34d14bbdc60\" returns successfully" Oct 2 19:34:52.082013 kubelet[1970]: E1002 19:34:52.081960 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:52.428605 kernel: IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) Oct 2 19:34:52.428791 kernel: IPVS: Connection hash table configured (size=4096, memory=32Kbytes) Oct 2 19:34:52.433655 kernel: IPVS: ipvs loaded. Oct 2 19:34:52.434855 systemd[1]: run-containerd-runc-k8s.io-cb8c2042c61d16b0640e492afddc87de87e873963d67599c7aef3609579b60f6-runc.CEJ9ob.mount: Deactivated successfully. Oct 2 19:34:52.447650 kernel: IPVS: [rr] scheduler registered. Oct 2 19:34:52.455671 kernel: IPVS: [wrr] scheduler registered. Oct 2 19:34:52.461629 kernel: IPVS: [sh] scheduler registered. Oct 2 19:34:52.584000 audit[2224]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.584000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe86f74b10 a2=0 a3=7ffe86f74afc items=0 ppid=2176 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.584000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:34:52.586000 audit[2225]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.586000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc419f1640 a2=0 a3=7ffc419f162c items=0 ppid=2176 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.586000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:34:52.588000 audit[2226]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.588000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffced377b90 a2=0 a3=7ffced377b7c items=0 ppid=2176 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.588000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:34:52.592000 audit[2227]: NETFILTER_CFG table=filter:62 family=10 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.592000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5286dca0 a2=0 a3=7ffe5286dc8c items=0 ppid=2176 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.592000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:34:52.599000 audit[2228]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.599000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca131be10 a2=0 a3=7ffca131bdfc items=0 ppid=2176 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.599000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:34:52.604000 audit[2229]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.604000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd60b47500 a2=0 a3=7ffd60b474ec items=0 ppid=2176 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.604000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:34:52.699000 audit[2230]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.699000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffedd5e9880 a2=0 a3=7ffedd5e986c items=0 ppid=2176 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.699000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:34:52.706000 audit[2232]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.706000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd29a6d510 a2=0 a3=7ffd29a6d4fc items=0 ppid=2176 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.706000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:34:52.717000 audit[2235]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.717000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe8b323600 a2=0 a3=7ffe8b3235ec items=0 ppid=2176 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.717000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:34:52.720000 audit[2236]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.720000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd197c90e0 a2=0 a3=7ffd197c90cc items=0 ppid=2176 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.720000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:34:52.730000 audit[2238]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.730000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcdb6cdf20 a2=0 a3=7ffcdb6cdf0c items=0 ppid=2176 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.730000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:34:52.735000 audit[2239]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.735000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffce0134f80 a2=0 a3=7ffce0134f6c items=0 ppid=2176 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.735000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:34:52.743000 audit[2241]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.743000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffee4a8d8a0 a2=0 a3=7ffee4a8d88c items=0 ppid=2176 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.743000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:34:52.758000 audit[2244]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.758000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcf4a48440 a2=0 a3=7ffcf4a4842c items=0 ppid=2176 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.758000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:34:52.761000 audit[2245]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2245 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.761000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf6b1de70 a2=0 a3=7ffcf6b1de5c items=0 ppid=2176 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.761000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:34:52.764000 audit[2247]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.764000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc91900f60 a2=0 a3=7ffc91900f4c items=0 ppid=2176 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.764000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:34:52.767000 audit[2248]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.767000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd4f424350 a2=0 a3=7ffd4f42433c items=0 ppid=2176 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:34:52.771000 audit[2250]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.771000 audit[2250]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc77753810 a2=0 a3=7ffc777537fc items=0 ppid=2176 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:34:52.775000 audit[2253]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.775000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd2991bc10 a2=0 a3=7ffd2991bbfc items=0 ppid=2176 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.775000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:34:52.781000 audit[2256]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.781000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff325d88f0 a2=0 a3=7fff325d88dc items=0 ppid=2176 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.781000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:34:52.782000 audit[2257]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.782000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdbf2ec2c0 a2=0 a3=7ffdbf2ec2ac items=0 ppid=2176 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.782000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:34:52.786000 audit[2259]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.786000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff8fbebb20 a2=0 a3=7fff8fbebb0c items=0 ppid=2176 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.786000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:34:52.790000 audit[2262]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:34:52.790000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdb6094770 a2=0 a3=7ffdb609475c items=0 ppid=2176 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.790000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:34:52.822000 audit[2267]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:52.822000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffd111fc1f0 a2=0 a3=7ffd111fc1dc items=0 ppid=2176 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.822000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:52.841000 audit[2267]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:52.841000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd111fc1f0 a2=0 a3=7ffd111fc1dc items=0 ppid=2176 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.841000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:52.844000 audit[2270]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.844000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffccaf6a7d0 a2=0 a3=7ffccaf6a7bc items=0 ppid=2176 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:34:52.851000 audit[2272]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.851000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc6635dd40 a2=0 a3=7ffc6635dd2c items=0 ppid=2176 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.851000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:34:52.859000 audit[2275]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=2275 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.859000 audit[2275]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff737a9540 a2=0 a3=7fff737a952c items=0 ppid=2176 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.859000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:34:52.863000 audit[2276]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.863000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe837fdf50 a2=0 a3=7ffe837fdf3c items=0 ppid=2176 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.863000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:34:52.868000 audit[2278]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.868000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd817d7ca0 a2=0 a3=7ffd817d7c8c items=0 ppid=2176 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.868000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:34:52.872000 audit[2279]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2279 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.872000 audit[2279]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd7c896470 a2=0 a3=7ffd7c89645c items=0 ppid=2176 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.872000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:34:52.884000 audit[2281]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2281 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.884000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc6f4a2230 a2=0 a3=7ffc6f4a221c items=0 ppid=2176 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.884000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:34:52.895000 audit[2284]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.895000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffca1558450 a2=0 a3=7ffca155843c items=0 ppid=2176 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.895000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:34:52.898000 audit[2285]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.898000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff63c22960 a2=0 a3=7fff63c2294c items=0 ppid=2176 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.898000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:34:52.903000 audit[2287]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.903000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe9bf58a60 a2=0 a3=7ffe9bf58a4c items=0 ppid=2176 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.903000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:34:52.905000 audit[2288]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.905000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8ef026d0 a2=0 a3=7ffe8ef026bc items=0 ppid=2176 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.905000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:34:52.909000 audit[2290]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.909000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc957659b0 a2=0 a3=7ffc9576599c items=0 ppid=2176 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.909000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:34:52.913000 audit[2293]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.913000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcbac869a0 a2=0 a3=7ffcbac8698c items=0 ppid=2176 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.913000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:34:52.917000 audit[2296]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.917000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd230f7470 a2=0 a3=7ffd230f745c items=0 ppid=2176 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.917000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:34:52.918000 audit[2297]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.918000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc9f3875f0 a2=0 a3=7ffc9f3875dc items=0 ppid=2176 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.918000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:34:52.921000 audit[2299]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.921000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff65d7a710 a2=0 a3=7fff65d7a6fc items=0 ppid=2176 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.921000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:34:52.927000 audit[2302]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:34:52.927000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd295af110 a2=0 a3=7ffd295af0fc items=0 ppid=2176 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.927000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:34:52.938000 audit[2306]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:34:52.938000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fffd0b33960 a2=0 a3=7fffd0b3394c items=0 ppid=2176 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.938000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:52.940000 audit[2306]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:34:52.940000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=1860 a0=3 a1=7fffd0b33960 a2=0 a3=7fffd0b3394c items=0 ppid=2176 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:52.940000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:53.750661 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2017944328.mount: Deactivated successfully. Oct 2 19:34:55.262704 env[1047]: time="2023-10-02T19:34:55.262526320Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:55.265114 env[1047]: time="2023-10-02T19:34:55.265029079Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:55.267913 env[1047]: time="2023-10-02T19:34:55.267882638Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:55.271458 env[1047]: time="2023-10-02T19:34:55.271435688Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:34:55.273297 env[1047]: time="2023-10-02T19:34:55.273230799Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1\"" Oct 2 19:34:55.282154 env[1047]: time="2023-10-02T19:34:55.282092339Z" level=info msg="CreateContainer within sandbox \"cb8c2042c61d16b0640e492afddc87de87e873963d67599c7aef3609579b60f6\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:34:55.300204 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2048522956.mount: Deactivated successfully. Oct 2 19:34:55.306762 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount116828678.mount: Deactivated successfully. Oct 2 19:34:55.314555 env[1047]: time="2023-10-02T19:34:55.314515801Z" level=info msg="CreateContainer within sandbox \"cb8c2042c61d16b0640e492afddc87de87e873963d67599c7aef3609579b60f6\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"9a27a94e9a30a8a38ed20ea8acc524960efd0e01252b9c3e0cf25a07fb884d0b\"" Oct 2 19:34:55.318463 env[1047]: time="2023-10-02T19:34:55.318438156Z" level=info msg="StartContainer for \"9a27a94e9a30a8a38ed20ea8acc524960efd0e01252b9c3e0cf25a07fb884d0b\"" Oct 2 19:34:55.355519 systemd[1]: Started cri-containerd-9a27a94e9a30a8a38ed20ea8acc524960efd0e01252b9c3e0cf25a07fb884d0b.scope. Oct 2 19:34:55.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.378000 audit: BPF prog-id=123 op=LOAD Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2080 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:55.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961323761393465396133306138613338656432306561386163633532 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2080 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:55.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961323761393465396133306138613338656432306561386163633532 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit: BPF prog-id=124 op=LOAD Oct 2 19:34:55.380000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000243b0 items=0 ppid=2080 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:55.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961323761393465396133306138613338656432306561386163633532 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.380000 audit: BPF prog-id=125 op=LOAD Oct 2 19:34:55.380000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000243f8 items=0 ppid=2080 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:55.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961323761393465396133306138613338656432306561386163633532 Oct 2 19:34:55.380000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:34:55.381000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:55.381000 audit: BPF prog-id=126 op=LOAD Oct 2 19:34:55.381000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024808 items=0 ppid=2080 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:55.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961323761393465396133306138613338656432306561386163633532 Oct 2 19:34:55.404045 env[1047]: time="2023-10-02T19:34:55.403859703Z" level=info msg="StartContainer for \"9a27a94e9a30a8a38ed20ea8acc524960efd0e01252b9c3e0cf25a07fb884d0b\" returns successfully" Oct 2 19:34:57.083436 kubelet[1970]: E1002 19:34:57.083399 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:57.660000 audit[2371]: NETFILTER_CFG table=filter:103 family=2 entries=13 op=nft_register_rule pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:57.663865 kernel: kauditd_printk_skb: 336 callbacks suppressed Oct 2 19:34:57.663923 kernel: audit: type=1325 audit(1696275297.660:1056): table=filter:103 family=2 entries=13 op=nft_register_rule pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:57.660000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7fff1c7bc210 a2=0 a3=7fff1c7bc1fc items=0 ppid=2176 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:57.672820 kernel: audit: type=1300 audit(1696275297.660:1056): arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7fff1c7bc210 a2=0 a3=7fff1c7bc1fc items=0 ppid=2176 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:57.660000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:57.675433 kernel: audit: type=1327 audit(1696275297.660:1056): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:57.677000 audit[2371]: NETFILTER_CFG table=nat:104 family=2 entries=20 op=nft_register_rule pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:57.677000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fff1c7bc210 a2=0 a3=7fff1c7bc1fc items=0 ppid=2176 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:57.687368 kernel: audit: type=1325 audit(1696275297.677:1057): table=nat:104 family=2 entries=20 op=nft_register_rule pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:57.687428 kernel: audit: type=1300 audit(1696275297.677:1057): arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fff1c7bc210 a2=0 a3=7fff1c7bc1fc items=0 ppid=2176 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:57.687456 kernel: audit: type=1327 audit(1696275297.677:1057): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:57.677000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:57.716000 audit[2397]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:57.716000 audit[2397]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffc48925e00 a2=0 a3=7ffc48925dec items=0 ppid=2176 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:57.725859 kernel: audit: type=1325 audit(1696275297.716:1058): table=filter:105 family=2 entries=14 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:57.725919 kernel: audit: type=1300 audit(1696275297.716:1058): arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffc48925e00 a2=0 a3=7ffc48925dec items=0 ppid=2176 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:57.716000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:57.731597 kernel: audit: type=1327 audit(1696275297.716:1058): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:57.716000 audit[2397]: NETFILTER_CFG table=nat:106 family=2 entries=20 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:57.716000 audit[2397]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc48925e00 a2=0 a3=7ffc48925dec items=0 ppid=2176 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:57.716000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:57.737596 kernel: audit: type=1325 audit(1696275297.716:1059): table=nat:106 family=2 entries=20 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:57.886949 kubelet[1970]: I1002 19:34:57.886887 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:57.902168 systemd[1]: Created slice kubepods-besteffort-pod915a9430_090d_4dc1_827a_982eae052863.slice. Oct 2 19:34:57.952736 kubelet[1970]: I1002 19:34:57.952695 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/915a9430-090d-4dc1-827a-982eae052863-tigera-ca-bundle\") pod \"calico-typha-b4df6d857-799vb\" (UID: \"915a9430-090d-4dc1-827a-982eae052863\") " pod="calico-system/calico-typha-b4df6d857-799vb" Oct 2 19:34:57.952869 kubelet[1970]: I1002 19:34:57.952748 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/915a9430-090d-4dc1-827a-982eae052863-typha-certs\") pod \"calico-typha-b4df6d857-799vb\" (UID: \"915a9430-090d-4dc1-827a-982eae052863\") " pod="calico-system/calico-typha-b4df6d857-799vb" Oct 2 19:34:57.952869 kubelet[1970]: I1002 19:34:57.952784 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ztzkl\" (UniqueName: \"kubernetes.io/projected/915a9430-090d-4dc1-827a-982eae052863-kube-api-access-ztzkl\") pod \"calico-typha-b4df6d857-799vb\" (UID: \"915a9430-090d-4dc1-827a-982eae052863\") " pod="calico-system/calico-typha-b4df6d857-799vb" Oct 2 19:34:57.971182 kubelet[1970]: I1002 19:34:57.971142 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:34:57.977475 systemd[1]: Created slice kubepods-besteffort-pod57e46753_762a_4603_bfff_70abb2bb4403.slice. Oct 2 19:34:58.053726 kubelet[1970]: I1002 19:34:58.053460 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6hq75\" (UniqueName: \"kubernetes.io/projected/57e46753-762a-4603-bfff-70abb2bb4403-kube-api-access-6hq75\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.055926 kubelet[1970]: I1002 19:34:58.055753 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/57e46753-762a-4603-bfff-70abb2bb4403-node-certs\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.056372 kubelet[1970]: I1002 19:34:58.056324 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/57e46753-762a-4603-bfff-70abb2bb4403-cni-net-dir\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.056529 kubelet[1970]: I1002 19:34:58.056415 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/57e46753-762a-4603-bfff-70abb2bb4403-lib-modules\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.056529 kubelet[1970]: I1002 19:34:58.056465 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/57e46753-762a-4603-bfff-70abb2bb4403-policysync\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.056529 kubelet[1970]: I1002 19:34:58.056513 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/57e46753-762a-4603-bfff-70abb2bb4403-flexvol-driver-host\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.056841 kubelet[1970]: I1002 19:34:58.056593 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/57e46753-762a-4603-bfff-70abb2bb4403-cni-bin-dir\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.056841 kubelet[1970]: I1002 19:34:58.056646 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/57e46753-762a-4603-bfff-70abb2bb4403-var-run-calico\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.056841 kubelet[1970]: I1002 19:34:58.056699 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/57e46753-762a-4603-bfff-70abb2bb4403-xtables-lock\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.056841 kubelet[1970]: I1002 19:34:58.056773 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/57e46753-762a-4603-bfff-70abb2bb4403-tigera-ca-bundle\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.056841 kubelet[1970]: I1002 19:34:58.056822 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/57e46753-762a-4603-bfff-70abb2bb4403-var-lib-calico\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.057160 kubelet[1970]: I1002 19:34:58.056868 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/57e46753-762a-4603-bfff-70abb2bb4403-cni-log-dir\") pod \"calico-node-fhpdf\" (UID: \"57e46753-762a-4603-bfff-70abb2bb4403\") " pod="calico-system/calico-node-fhpdf" Oct 2 19:34:58.166614 kubelet[1970]: E1002 19:34:58.166591 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:34:58.166614 kubelet[1970]: W1002 19:34:58.166608 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:34:58.166937 kubelet[1970]: E1002 19:34:58.166630 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:34:58.190426 kubelet[1970]: E1002 19:34:58.190405 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:34:58.190556 kubelet[1970]: W1002 19:34:58.190542 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:34:58.190704 kubelet[1970]: E1002 19:34:58.190693 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:34:58.209278 env[1047]: time="2023-10-02T19:34:58.208805641Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-b4df6d857-799vb,Uid:915a9430-090d-4dc1-827a-982eae052863,Namespace:calico-system,Attempt:0,}" Oct 2 19:34:58.245494 env[1047]: time="2023-10-02T19:34:58.245421462Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:34:58.245654 env[1047]: time="2023-10-02T19:34:58.245502905Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:34:58.245654 env[1047]: time="2023-10-02T19:34:58.245532370Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:34:58.245750 env[1047]: time="2023-10-02T19:34:58.245695487Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8aadcb32b68bd1090e9c692e034592b9bbd5568fcb27f639164398c43528647a pid=2412 runtime=io.containerd.runc.v2 Oct 2 19:34:58.272772 systemd[1]: Started cri-containerd-8aadcb32b68bd1090e9c692e034592b9bbd5568fcb27f639164398c43528647a.scope. Oct 2 19:34:58.282043 env[1047]: time="2023-10-02T19:34:58.281980236Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-fhpdf,Uid:57e46753-762a-4603-bfff-70abb2bb4403,Namespace:calico-system,Attempt:0,}" Oct 2 19:34:58.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.301000 audit: BPF prog-id=127 op=LOAD Oct 2 19:34:58.302000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.302000 audit[2421]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2412 pid=2421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861616463623332623638626431303930653963363932653033343539 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2412 pid=2421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861616463623332623638626431303930653963363932653033343539 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit: BPF prog-id=128 op=LOAD Oct 2 19:34:58.303000 audit[2421]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000388340 items=0 ppid=2412 pid=2421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861616463623332623638626431303930653963363932653033343539 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit: BPF prog-id=129 op=LOAD Oct 2 19:34:58.303000 audit[2421]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000388388 items=0 ppid=2412 pid=2421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861616463623332623638626431303930653963363932653033343539 Oct 2 19:34:58.303000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:34:58.303000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { perfmon } for pid=2421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit[2421]: AVC avc: denied { bpf } for pid=2421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.303000 audit: BPF prog-id=130 op=LOAD Oct 2 19:34:58.303000 audit[2421]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000388798 items=0 ppid=2412 pid=2421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861616463623332623638626431303930653963363932653033343539 Oct 2 19:34:58.348731 env[1047]: time="2023-10-02T19:34:58.348484726Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-b4df6d857-799vb,Uid:915a9430-090d-4dc1-827a-982eae052863,Namespace:calico-system,Attempt:0,} returns sandbox id \"8aadcb32b68bd1090e9c692e034592b9bbd5568fcb27f639164398c43528647a\"" Oct 2 19:34:58.350543 env[1047]: time="2023-10-02T19:34:58.350491694Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 19:34:58.397321 env[1047]: time="2023-10-02T19:34:58.397114844Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:34:58.397321 env[1047]: time="2023-10-02T19:34:58.397156813Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:34:58.397321 env[1047]: time="2023-10-02T19:34:58.397170909Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:34:58.402386 env[1047]: time="2023-10-02T19:34:58.399073312Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ce70112f5c57e21364a06d1ccb3daa8152ec53948dcb27857680ab89caf306d7 pid=2452 runtime=io.containerd.runc.v2 Oct 2 19:34:58.416219 systemd[1]: Started cri-containerd-ce70112f5c57e21364a06d1ccb3daa8152ec53948dcb27857680ab89caf306d7.scope. Oct 2 19:34:58.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.435000 audit: BPF prog-id=131 op=LOAD Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2452 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365373031313266356335376532313336346130366431636362336461 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2452 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365373031313266356335376532313336346130366431636362336461 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.437000 audit: BPF prog-id=132 op=LOAD Oct 2 19:34:58.437000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002a0370 items=0 ppid=2452 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365373031313266356335376532313336346130366431636362336461 Oct 2 19:34:58.438000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.438000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.438000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.438000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.438000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.438000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.438000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.438000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.438000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.438000 audit: BPF prog-id=133 op=LOAD Oct 2 19:34:58.438000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002a03b8 items=0 ppid=2452 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365373031313266356335376532313336346130366431636362336461 Oct 2 19:34:58.440000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:34:58.440000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:34:58.440000 audit: BPF prog-id=134 op=LOAD Oct 2 19:34:58.440000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002a07c8 items=0 ppid=2452 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365373031313266356335376532313336346130366431636362336461 Oct 2 19:34:58.464621 env[1047]: time="2023-10-02T19:34:58.464468649Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-fhpdf,Uid:57e46753-762a-4603-bfff-70abb2bb4403,Namespace:calico-system,Attempt:0,} returns sandbox id \"ce70112f5c57e21364a06d1ccb3daa8152ec53948dcb27857680ab89caf306d7\"" Oct 2 19:34:58.805000 audit[2510]: NETFILTER_CFG table=filter:107 family=2 entries=14 op=nft_register_rule pid=2510 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:58.805000 audit[2510]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffd420c6730 a2=0 a3=7ffd420c671c items=0 ppid=2176 pid=2510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.805000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:58.809000 audit[2510]: NETFILTER_CFG table=nat:108 family=2 entries=20 op=nft_register_rule pid=2510 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:34:58.809000 audit[2510]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd420c6730 a2=0 a3=7ffd420c671c items=0 ppid=2176 pid=2510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:58.809000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:34:59.863269 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4120027645.mount: Deactivated successfully. Oct 2 19:35:02.084474 kubelet[1970]: E1002 19:35:02.084300 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:02.740386 env[1047]: time="2023-10-02T19:35:02.740280457Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:02.747214 env[1047]: time="2023-10-02T19:35:02.747144375Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:02.756076 env[1047]: time="2023-10-02T19:35:02.756013106Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:02.768619 env[1047]: time="2023-10-02T19:35:02.768485292Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:02.776124 env[1047]: time="2023-10-02T19:35:02.773546525Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f\"" Oct 2 19:35:02.779447 env[1047]: time="2023-10-02T19:35:02.779376150Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:35:02.782966 env[1047]: time="2023-10-02T19:35:02.782877283Z" level=info msg="CreateContainer within sandbox \"8aadcb32b68bd1090e9c692e034592b9bbd5568fcb27f639164398c43528647a\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 19:35:02.811103 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount645570295.mount: Deactivated successfully. Oct 2 19:35:02.814605 env[1047]: time="2023-10-02T19:35:02.814544269Z" level=info msg="CreateContainer within sandbox \"8aadcb32b68bd1090e9c692e034592b9bbd5568fcb27f639164398c43528647a\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"eed4eb1f80cbe93c37b1eaf0982645b989e6df66455c5941c548662ebf533fce\"" Oct 2 19:35:02.816716 env[1047]: time="2023-10-02T19:35:02.815993189Z" level=info msg="StartContainer for \"eed4eb1f80cbe93c37b1eaf0982645b989e6df66455c5941c548662ebf533fce\"" Oct 2 19:35:02.847963 systemd[1]: run-containerd-runc-k8s.io-eed4eb1f80cbe93c37b1eaf0982645b989e6df66455c5941c548662ebf533fce-runc.6i4g87.mount: Deactivated successfully. Oct 2 19:35:02.852379 systemd[1]: Started cri-containerd-eed4eb1f80cbe93c37b1eaf0982645b989e6df66455c5941c548662ebf533fce.scope. Oct 2 19:35:02.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.866469 kernel: kauditd_printk_skb: 122 callbacks suppressed Oct 2 19:35:02.866514 kernel: audit: type=1400 audit(1696275302.863:1098): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.871408 kernel: audit: type=1400 audit(1696275302.863:1099): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.882486 kernel: audit: type=1400 audit(1696275302.868:1100): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.882646 kernel: audit: type=1400 audit(1696275302.868:1101): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.882711 kernel: audit: type=1400 audit(1696275302.868:1102): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.889663 kernel: audit: type=1400 audit(1696275302.868:1103): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.889707 kernel: audit: type=1400 audit(1696275302.868:1104): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.896528 kernel: audit: type=1400 audit(1696275302.868:1105): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.903858 kernel: audit: type=1400 audit(1696275302.868:1106): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.903900 kernel: audit: type=1400 audit(1696275302.869:1107): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.869000 audit: BPF prog-id=135 op=LOAD Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2412 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:02.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565643465623166383063626539336333376231656166303938323634 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2412 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:02.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565643465623166383063626539336333376231656166303938323634 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.870000 audit: BPF prog-id=136 op=LOAD Oct 2 19:35:02.870000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002e2fd0 items=0 ppid=2412 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:02.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565643465623166383063626539336333376231656166303938323634 Oct 2 19:35:02.872000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.872000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.872000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.872000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.872000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.872000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.872000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.872000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.872000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.872000 audit: BPF prog-id=137 op=LOAD Oct 2 19:35:02.872000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002e3018 items=0 ppid=2412 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:02.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565643465623166383063626539336333376231656166303938323634 Oct 2 19:35:02.872000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:35:02.872000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:02.873000 audit: BPF prog-id=138 op=LOAD Oct 2 19:35:02.873000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002e3428 items=0 ppid=2412 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:02.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565643465623166383063626539336333376231656166303938323634 Oct 2 19:35:02.922098 env[1047]: time="2023-10-02T19:35:02.922045304Z" level=info msg="StartContainer for \"eed4eb1f80cbe93c37b1eaf0982645b989e6df66455c5941c548662ebf533fce\" returns successfully" Oct 2 19:35:03.187013 kubelet[1970]: E1002 19:35:03.186975 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.188250 kubelet[1970]: W1002 19:35:03.188190 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.188449 kubelet[1970]: E1002 19:35:03.188424 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.189001 kubelet[1970]: E1002 19:35:03.188975 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.189286 kubelet[1970]: W1002 19:35:03.189254 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.189561 kubelet[1970]: E1002 19:35:03.189496 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.190314 kubelet[1970]: E1002 19:35:03.190286 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.190513 kubelet[1970]: W1002 19:35:03.190484 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.190753 kubelet[1970]: E1002 19:35:03.190729 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.191432 kubelet[1970]: E1002 19:35:03.191408 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.191812 kubelet[1970]: W1002 19:35:03.191783 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.191994 kubelet[1970]: E1002 19:35:03.191973 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.198217 kubelet[1970]: E1002 19:35:03.198181 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.198478 kubelet[1970]: W1002 19:35:03.198449 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.198693 kubelet[1970]: E1002 19:35:03.198668 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.199171 kubelet[1970]: E1002 19:35:03.199148 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.199352 kubelet[1970]: W1002 19:35:03.199326 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.199511 kubelet[1970]: E1002 19:35:03.199489 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.200261 kubelet[1970]: E1002 19:35:03.200236 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.200435 kubelet[1970]: W1002 19:35:03.200409 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.200633 kubelet[1970]: E1002 19:35:03.200561 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.201082 kubelet[1970]: E1002 19:35:03.201059 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.201254 kubelet[1970]: W1002 19:35:03.201228 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.201410 kubelet[1970]: E1002 19:35:03.201389 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.201978 kubelet[1970]: E1002 19:35:03.201955 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.202712 kubelet[1970]: W1002 19:35:03.202077 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.202712 kubelet[1970]: E1002 19:35:03.202114 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.202903 kubelet[1970]: E1002 19:35:03.202553 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.203050 kubelet[1970]: W1002 19:35:03.203024 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.203207 kubelet[1970]: E1002 19:35:03.203185 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.203695 kubelet[1970]: E1002 19:35:03.203671 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.203874 kubelet[1970]: W1002 19:35:03.203849 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.204022 kubelet[1970]: E1002 19:35:03.204002 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.204485 kubelet[1970]: E1002 19:35:03.204463 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.204731 kubelet[1970]: W1002 19:35:03.204703 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.204894 kubelet[1970]: E1002 19:35:03.204873 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.234083 kubelet[1970]: E1002 19:35:03.234055 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.234255 kubelet[1970]: W1002 19:35:03.234239 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.234334 kubelet[1970]: E1002 19:35:03.234323 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.237756 kubelet[1970]: E1002 19:35:03.237728 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.237756 kubelet[1970]: W1002 19:35:03.237753 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.237877 kubelet[1970]: E1002 19:35:03.237781 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.239015 kubelet[1970]: E1002 19:35:03.238982 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.239015 kubelet[1970]: W1002 19:35:03.238996 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.239161 kubelet[1970]: E1002 19:35:03.239144 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.240461 kubelet[1970]: E1002 19:35:03.240438 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.240461 kubelet[1970]: W1002 19:35:03.240454 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.240622 kubelet[1970]: E1002 19:35:03.240602 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.240798 kubelet[1970]: E1002 19:35:03.240770 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.240798 kubelet[1970]: W1002 19:35:03.240791 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.240976 kubelet[1970]: E1002 19:35:03.240956 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.241192 kubelet[1970]: E1002 19:35:03.241173 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.241192 kubelet[1970]: W1002 19:35:03.241187 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.241384 kubelet[1970]: E1002 19:35:03.241282 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.242695 kubelet[1970]: E1002 19:35:03.242678 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.242793 kubelet[1970]: W1002 19:35:03.242778 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.242885 kubelet[1970]: E1002 19:35:03.242873 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.243128 kubelet[1970]: E1002 19:35:03.243096 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.243128 kubelet[1970]: W1002 19:35:03.243112 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.243231 kubelet[1970]: E1002 19:35:03.243140 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.243291 kubelet[1970]: E1002 19:35:03.243272 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.243291 kubelet[1970]: W1002 19:35:03.243287 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.243368 kubelet[1970]: E1002 19:35:03.243299 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.243472 kubelet[1970]: E1002 19:35:03.243455 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.243472 kubelet[1970]: W1002 19:35:03.243469 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.243638 kubelet[1970]: E1002 19:35:03.243623 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.243883 kubelet[1970]: E1002 19:35:03.243640 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.243968 kubelet[1970]: W1002 19:35:03.243954 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.244099 kubelet[1970]: E1002 19:35:03.244073 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.244338 kubelet[1970]: E1002 19:35:03.244327 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.244415 kubelet[1970]: W1002 19:35:03.244403 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.244533 kubelet[1970]: E1002 19:35:03.244511 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.244771 kubelet[1970]: E1002 19:35:03.244760 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.244845 kubelet[1970]: W1002 19:35:03.244833 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.244937 kubelet[1970]: E1002 19:35:03.244926 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.245164 kubelet[1970]: E1002 19:35:03.245145 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.245164 kubelet[1970]: W1002 19:35:03.245160 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.245248 kubelet[1970]: E1002 19:35:03.245181 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.245393 kubelet[1970]: E1002 19:35:03.245376 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.245393 kubelet[1970]: W1002 19:35:03.245391 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.245484 kubelet[1970]: E1002 19:35:03.245411 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.245774 kubelet[1970]: E1002 19:35:03.245763 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.245847 kubelet[1970]: W1002 19:35:03.245836 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.245914 kubelet[1970]: E1002 19:35:03.245905 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.246339 kubelet[1970]: E1002 19:35:03.246328 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.246409 kubelet[1970]: W1002 19:35:03.246398 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.246490 kubelet[1970]: E1002 19:35:03.246480 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.246696 kubelet[1970]: E1002 19:35:03.246677 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:03.246696 kubelet[1970]: W1002 19:35:03.246691 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:03.246786 kubelet[1970]: E1002 19:35:03.246705 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:03.275000 audit[2604]: NETFILTER_CFG table=filter:109 family=2 entries=13 op=nft_register_rule pid=2604 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:03.275000 audit[2604]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffc77c60790 a2=0 a3=7ffc77c6077c items=0 ppid=2176 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:03.275000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:03.276000 audit[2604]: NETFILTER_CFG table=nat:110 family=2 entries=27 op=nft_register_chain pid=2604 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:03.276000 audit[2604]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7ffc77c60790 a2=0 a3=7ffc77c6077c items=0 ppid=2176 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:03.276000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:04.214115 kubelet[1970]: E1002 19:35:04.214074 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.214804 kubelet[1970]: W1002 19:35:04.214685 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.214804 kubelet[1970]: E1002 19:35:04.214762 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.215236 kubelet[1970]: E1002 19:35:04.215181 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.215236 kubelet[1970]: W1002 19:35:04.215217 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.215395 kubelet[1970]: E1002 19:35:04.215248 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.215626 kubelet[1970]: E1002 19:35:04.215556 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.215626 kubelet[1970]: W1002 19:35:04.215618 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.215799 kubelet[1970]: E1002 19:35:04.215649 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.216086 kubelet[1970]: E1002 19:35:04.216037 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.216086 kubelet[1970]: W1002 19:35:04.216070 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.216276 kubelet[1970]: E1002 19:35:04.216102 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.216484 kubelet[1970]: E1002 19:35:04.216434 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.216484 kubelet[1970]: W1002 19:35:04.216470 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.216699 kubelet[1970]: E1002 19:35:04.216499 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.216914 kubelet[1970]: E1002 19:35:04.216865 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.216914 kubelet[1970]: W1002 19:35:04.216901 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.217073 kubelet[1970]: E1002 19:35:04.216927 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.217358 kubelet[1970]: E1002 19:35:04.217307 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.217358 kubelet[1970]: W1002 19:35:04.217338 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.217531 kubelet[1970]: E1002 19:35:04.217365 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.217705 kubelet[1970]: E1002 19:35:04.217677 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.217705 kubelet[1970]: W1002 19:35:04.217696 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.217857 kubelet[1970]: E1002 19:35:04.217711 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.217925 kubelet[1970]: E1002 19:35:04.217869 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.217925 kubelet[1970]: W1002 19:35:04.217880 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.217925 kubelet[1970]: E1002 19:35:04.217895 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.218173 kubelet[1970]: E1002 19:35:04.218061 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.218173 kubelet[1970]: W1002 19:35:04.218071 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.218173 kubelet[1970]: E1002 19:35:04.218086 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.218364 kubelet[1970]: E1002 19:35:04.218269 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.218364 kubelet[1970]: W1002 19:35:04.218280 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.218364 kubelet[1970]: E1002 19:35:04.218294 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.218552 kubelet[1970]: E1002 19:35:04.218460 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.218552 kubelet[1970]: W1002 19:35:04.218472 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.218552 kubelet[1970]: E1002 19:35:04.218485 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.247991 kubelet[1970]: E1002 19:35:04.247947 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.247991 kubelet[1970]: W1002 19:35:04.247972 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.247991 kubelet[1970]: E1002 19:35:04.247996 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.248337 kubelet[1970]: E1002 19:35:04.248269 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.248337 kubelet[1970]: W1002 19:35:04.248281 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.248337 kubelet[1970]: E1002 19:35:04.248305 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.248604 kubelet[1970]: E1002 19:35:04.248532 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.248604 kubelet[1970]: W1002 19:35:04.248549 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.248604 kubelet[1970]: E1002 19:35:04.248606 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.248854 kubelet[1970]: E1002 19:35:04.248780 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.248854 kubelet[1970]: W1002 19:35:04.248790 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.248854 kubelet[1970]: E1002 19:35:04.248805 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.249045 kubelet[1970]: E1002 19:35:04.248944 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.249045 kubelet[1970]: W1002 19:35:04.248953 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.249045 kubelet[1970]: E1002 19:35:04.248963 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.249237 kubelet[1970]: E1002 19:35:04.249078 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.249237 kubelet[1970]: W1002 19:35:04.249086 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.249237 kubelet[1970]: E1002 19:35:04.249100 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.249424 kubelet[1970]: E1002 19:35:04.249274 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.249424 kubelet[1970]: W1002 19:35:04.249282 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.249424 kubelet[1970]: E1002 19:35:04.249293 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.249684 kubelet[1970]: E1002 19:35:04.249668 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.249684 kubelet[1970]: W1002 19:35:04.249681 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.249828 kubelet[1970]: E1002 19:35:04.249756 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.249902 kubelet[1970]: E1002 19:35:04.249847 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.249902 kubelet[1970]: W1002 19:35:04.249855 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.250029 kubelet[1970]: E1002 19:35:04.249911 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.250029 kubelet[1970]: E1002 19:35:04.249997 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.250029 kubelet[1970]: W1002 19:35:04.250004 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.250029 kubelet[1970]: E1002 19:35:04.250019 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.250278 kubelet[1970]: E1002 19:35:04.250154 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.250278 kubelet[1970]: W1002 19:35:04.250162 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.250278 kubelet[1970]: E1002 19:35:04.250173 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.250466 kubelet[1970]: E1002 19:35:04.250290 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.250466 kubelet[1970]: W1002 19:35:04.250298 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.250466 kubelet[1970]: E1002 19:35:04.250312 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.250700 kubelet[1970]: E1002 19:35:04.250487 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.250700 kubelet[1970]: W1002 19:35:04.250499 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.250700 kubelet[1970]: E1002 19:35:04.250521 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.250897 kubelet[1970]: E1002 19:35:04.250872 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.250897 kubelet[1970]: W1002 19:35:04.250885 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.251030 kubelet[1970]: E1002 19:35:04.250904 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.251101 kubelet[1970]: E1002 19:35:04.251072 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.251101 kubelet[1970]: W1002 19:35:04.251084 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.251101 kubelet[1970]: E1002 19:35:04.251102 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.251287 kubelet[1970]: E1002 19:35:04.251250 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.251287 kubelet[1970]: W1002 19:35:04.251262 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.251287 kubelet[1970]: E1002 19:35:04.251280 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.251477 kubelet[1970]: E1002 19:35:04.251465 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.251477 kubelet[1970]: W1002 19:35:04.251476 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.251641 kubelet[1970]: E1002 19:35:04.251490 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:04.251980 kubelet[1970]: E1002 19:35:04.251946 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:04.251980 kubelet[1970]: W1002 19:35:04.251964 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:04.251980 kubelet[1970]: E1002 19:35:04.251979 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.227263 kubelet[1970]: E1002 19:35:05.227131 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.228072 kubelet[1970]: W1002 19:35:05.228036 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.228311 kubelet[1970]: E1002 19:35:05.228286 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.229034 kubelet[1970]: E1002 19:35:05.229010 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.229236 kubelet[1970]: W1002 19:35:05.229209 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.229440 kubelet[1970]: E1002 19:35:05.229417 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.230113 kubelet[1970]: E1002 19:35:05.230049 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.230333 kubelet[1970]: W1002 19:35:05.230305 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.230534 kubelet[1970]: E1002 19:35:05.230512 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.231296 kubelet[1970]: E1002 19:35:05.231231 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.231496 kubelet[1970]: W1002 19:35:05.231469 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.231739 kubelet[1970]: E1002 19:35:05.231716 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.233189 kubelet[1970]: E1002 19:35:05.233132 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.233430 kubelet[1970]: W1002 19:35:05.233391 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.233690 kubelet[1970]: E1002 19:35:05.233653 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.234309 kubelet[1970]: E1002 19:35:05.234285 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.234466 kubelet[1970]: W1002 19:35:05.234442 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.234707 kubelet[1970]: E1002 19:35:05.234684 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.235371 kubelet[1970]: E1002 19:35:05.235301 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.235530 kubelet[1970]: W1002 19:35:05.235505 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.235744 kubelet[1970]: E1002 19:35:05.235721 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.236350 kubelet[1970]: E1002 19:35:05.236326 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.236536 kubelet[1970]: W1002 19:35:05.236498 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.236794 kubelet[1970]: E1002 19:35:05.236770 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.237283 kubelet[1970]: E1002 19:35:05.237260 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.237449 kubelet[1970]: W1002 19:35:05.237423 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.237672 kubelet[1970]: E1002 19:35:05.237647 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.238150 kubelet[1970]: E1002 19:35:05.238126 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.238305 kubelet[1970]: W1002 19:35:05.238280 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.238454 kubelet[1970]: E1002 19:35:05.238429 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.238984 kubelet[1970]: E1002 19:35:05.238961 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.239159 kubelet[1970]: W1002 19:35:05.239133 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.239320 kubelet[1970]: E1002 19:35:05.239298 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.239879 kubelet[1970]: E1002 19:35:05.239855 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.240034 kubelet[1970]: W1002 19:35:05.240010 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.240223 kubelet[1970]: E1002 19:35:05.240176 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.254502 kubelet[1970]: E1002 19:35:05.254473 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.254752 kubelet[1970]: W1002 19:35:05.254724 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.254969 kubelet[1970]: E1002 19:35:05.254944 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.255496 kubelet[1970]: E1002 19:35:05.255470 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.255701 kubelet[1970]: W1002 19:35:05.255674 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.255894 kubelet[1970]: E1002 19:35:05.255869 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.256443 kubelet[1970]: E1002 19:35:05.256399 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.256655 kubelet[1970]: W1002 19:35:05.256443 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.256655 kubelet[1970]: E1002 19:35:05.256498 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.256898 kubelet[1970]: E1002 19:35:05.256861 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.256898 kubelet[1970]: W1002 19:35:05.256895 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.257085 kubelet[1970]: E1002 19:35:05.256925 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.257468 kubelet[1970]: E1002 19:35:05.257438 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.257468 kubelet[1970]: W1002 19:35:05.257466 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.257775 kubelet[1970]: E1002 19:35:05.257747 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.258012 kubelet[1970]: E1002 19:35:05.257825 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.258230 kubelet[1970]: W1002 19:35:05.258203 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.258454 kubelet[1970]: E1002 19:35:05.258402 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.258992 kubelet[1970]: E1002 19:35:05.258967 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.259186 kubelet[1970]: W1002 19:35:05.259159 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.259424 kubelet[1970]: E1002 19:35:05.259380 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.260020 kubelet[1970]: E1002 19:35:05.259946 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.260232 kubelet[1970]: W1002 19:35:05.260177 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.260470 kubelet[1970]: E1002 19:35:05.260426 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.261011 kubelet[1970]: E1002 19:35:05.260987 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.261267 kubelet[1970]: W1002 19:35:05.261239 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.261647 kubelet[1970]: E1002 19:35:05.261619 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.261953 kubelet[1970]: E1002 19:35:05.261931 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.262108 kubelet[1970]: W1002 19:35:05.262083 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.262340 kubelet[1970]: E1002 19:35:05.262296 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.262801 kubelet[1970]: E1002 19:35:05.262777 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.262980 kubelet[1970]: W1002 19:35:05.262954 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.263211 kubelet[1970]: E1002 19:35:05.263168 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.263741 kubelet[1970]: E1002 19:35:05.263717 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.263901 kubelet[1970]: W1002 19:35:05.263876 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.264123 kubelet[1970]: E1002 19:35:05.264078 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.264646 kubelet[1970]: E1002 19:35:05.264596 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.264830 kubelet[1970]: W1002 19:35:05.264802 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.265018 kubelet[1970]: E1002 19:35:05.264994 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.265429 kubelet[1970]: E1002 19:35:05.265397 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.265429 kubelet[1970]: W1002 19:35:05.265427 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.265674 kubelet[1970]: E1002 19:35:05.265471 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.265892 kubelet[1970]: E1002 19:35:05.265854 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.265892 kubelet[1970]: W1002 19:35:05.265886 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.266132 kubelet[1970]: E1002 19:35:05.265927 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.266679 kubelet[1970]: E1002 19:35:05.266655 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.266842 kubelet[1970]: W1002 19:35:05.266817 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.267024 kubelet[1970]: E1002 19:35:05.267002 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.267753 kubelet[1970]: E1002 19:35:05.267704 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.267753 kubelet[1970]: W1002 19:35:05.267738 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.267957 kubelet[1970]: E1002 19:35:05.267771 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:05.268773 kubelet[1970]: E1002 19:35:05.268745 1970 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:35:05.268983 kubelet[1970]: W1002 19:35:05.268957 1970 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:35:05.269132 kubelet[1970]: E1002 19:35:05.269111 1970 plugins.go:751] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:35:07.084995 kubelet[1970]: E1002 19:35:07.084968 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:07.307877 env[1047]: time="2023-10-02T19:35:07.307784790Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:07.311341 env[1047]: time="2023-10-02T19:35:07.311288037Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:07.317892 env[1047]: time="2023-10-02T19:35:07.317837563Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:07.321305 env[1047]: time="2023-10-02T19:35:07.321278713Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:07.323614 env[1047]: time="2023-10-02T19:35:07.323486338Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72\"" Oct 2 19:35:07.331817 env[1047]: time="2023-10-02T19:35:07.331754831Z" level=info msg="CreateContainer within sandbox \"ce70112f5c57e21364a06d1ccb3daa8152ec53948dcb27857680ab89caf306d7\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:35:07.352824 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3781650288.mount: Deactivated successfully. Oct 2 19:35:07.368654 env[1047]: time="2023-10-02T19:35:07.368616837Z" level=info msg="CreateContainer within sandbox \"ce70112f5c57e21364a06d1ccb3daa8152ec53948dcb27857680ab89caf306d7\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"dc0ff6ba10a8c7d997fafdebdf6731e81768fc2b8481d236464116e79860c15f\"" Oct 2 19:35:07.370698 env[1047]: time="2023-10-02T19:35:07.369795530Z" level=info msg="StartContainer for \"dc0ff6ba10a8c7d997fafdebdf6731e81768fc2b8481d236464116e79860c15f\"" Oct 2 19:35:07.400776 systemd[1]: Started cri-containerd-dc0ff6ba10a8c7d997fafdebdf6731e81768fc2b8481d236464116e79860c15f.scope. Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2452 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:07.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463306666366261313061386337643939376661666465626466363733 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.437000 audit: BPF prog-id=139 op=LOAD Oct 2 19:35:07.437000 audit[2674]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000024d60 items=0 ppid=2452 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:07.437000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463306666366261313061386337643939376661666465626466363733 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit: BPF prog-id=140 op=LOAD Oct 2 19:35:07.439000 audit[2674]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000024da8 items=0 ppid=2452 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:07.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463306666366261313061386337643939376661666465626466363733 Oct 2 19:35:07.439000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:35:07.439000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:07.439000 audit: BPF prog-id=141 op=LOAD Oct 2 19:35:07.439000 audit[2674]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000024e38 items=0 ppid=2452 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:07.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463306666366261313061386337643939376661666465626466363733 Oct 2 19:35:07.477985 env[1047]: time="2023-10-02T19:35:07.477928592Z" level=info msg="StartContainer for \"dc0ff6ba10a8c7d997fafdebdf6731e81768fc2b8481d236464116e79860c15f\" returns successfully" Oct 2 19:35:07.489513 systemd[1]: cri-containerd-dc0ff6ba10a8c7d997fafdebdf6731e81768fc2b8481d236464116e79860c15f.scope: Deactivated successfully. Oct 2 19:35:07.493000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:35:07.626829 env[1047]: time="2023-10-02T19:35:07.624104056Z" level=info msg="shim disconnected" id=dc0ff6ba10a8c7d997fafdebdf6731e81768fc2b8481d236464116e79860c15f Oct 2 19:35:07.627177 env[1047]: time="2023-10-02T19:35:07.625734677Z" level=warning msg="cleaning up after shim disconnected" id=dc0ff6ba10a8c7d997fafdebdf6731e81768fc2b8481d236464116e79860c15f namespace=k8s.io Oct 2 19:35:07.627177 env[1047]: time="2023-10-02T19:35:07.627026282Z" level=info msg="cleaning up dead shim" Oct 2 19:35:07.644927 env[1047]: time="2023-10-02T19:35:07.644843844Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:35:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2715 runtime=io.containerd.runc.v2\n" Oct 2 19:35:08.160818 env[1047]: time="2023-10-02T19:35:08.160749596Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:35:08.350133 systemd[1]: run-containerd-runc-k8s.io-dc0ff6ba10a8c7d997fafdebdf6731e81768fc2b8481d236464116e79860c15f-runc.ojwLqJ.mount: Deactivated successfully. Oct 2 19:35:08.350808 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc0ff6ba10a8c7d997fafdebdf6731e81768fc2b8481d236464116e79860c15f-rootfs.mount: Deactivated successfully. Oct 2 19:35:09.878240 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount526518167.mount: Deactivated successfully. Oct 2 19:35:12.089206 kubelet[1970]: E1002 19:35:12.089107 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:15.488706 env[1047]: time="2023-10-02T19:35:15.488580135Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:15.496794 env[1047]: time="2023-10-02T19:35:15.496716703Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:15.503614 env[1047]: time="2023-10-02T19:35:15.503552623Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:15.507021 env[1047]: time="2023-10-02T19:35:15.506975558Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:15.507860 env[1047]: time="2023-10-02T19:35:15.507813041Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7\"" Oct 2 19:35:15.512668 env[1047]: time="2023-10-02T19:35:15.512487893Z" level=info msg="CreateContainer within sandbox \"ce70112f5c57e21364a06d1ccb3daa8152ec53948dcb27857680ab89caf306d7\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:35:15.539366 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount302544130.mount: Deactivated successfully. Oct 2 19:35:15.540412 env[1047]: time="2023-10-02T19:35:15.540012594Z" level=info msg="CreateContainer within sandbox \"ce70112f5c57e21364a06d1ccb3daa8152ec53948dcb27857680ab89caf306d7\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"af029450911d9fc193b056cb8e9a28767b2e23839a3c3a008ca4d99302036eb5\"" Oct 2 19:35:15.542737 env[1047]: time="2023-10-02T19:35:15.542694806Z" level=info msg="StartContainer for \"af029450911d9fc193b056cb8e9a28767b2e23839a3c3a008ca4d99302036eb5\"" Oct 2 19:35:15.571575 systemd[1]: Started cri-containerd-af029450911d9fc193b056cb8e9a28767b2e23839a3c3a008ca4d99302036eb5.scope. Oct 2 19:35:15.575662 systemd[1]: run-containerd-runc-k8s.io-af029450911d9fc193b056cb8e9a28767b2e23839a3c3a008ca4d99302036eb5-runc.6XOTAn.mount: Deactivated successfully. Oct 2 19:35:15.607286 kernel: kauditd_printk_skb: 97 callbacks suppressed Oct 2 19:35:15.612918 kernel: audit: type=1400 audit(1696275315.595:1125): avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.612965 kernel: audit: type=1300 audit(1696275315.595:1125): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2452 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:15.612990 kernel: audit: type=1327 audit(1696275315.595:1125): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166303239343530393131643966633139336230353663623865396132 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2452 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:15.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166303239343530393131643966633139336230353663623865396132 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.618613 kernel: audit: type=1400 audit(1696275315.595:1126): avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.626362 kernel: audit: type=1400 audit(1696275315.595:1126): avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.626440 kernel: audit: type=1400 audit(1696275315.595:1126): avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.629742 kernel: audit: type=1400 audit(1696275315.595:1126): avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.629784 kernel: audit: type=1400 audit(1696275315.595:1126): avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.636805 kernel: audit: type=1400 audit(1696275315.595:1126): avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.640671 kernel: audit: type=1400 audit(1696275315.595:1126): avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.595000 audit: BPF prog-id=142 op=LOAD Oct 2 19:35:15.595000 audit[2741]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0002e5eb0 items=0 ppid=2452 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:15.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166303239343530393131643966633139336230353663623865396132 Oct 2 19:35:15.596000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.596000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.596000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.596000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.596000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.596000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.596000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.596000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.596000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.596000 audit: BPF prog-id=143 op=LOAD Oct 2 19:35:15.596000 audit[2741]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0002e5ef8 items=0 ppid=2452 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:15.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166303239343530393131643966633139336230353663623865396132 Oct 2 19:35:15.600000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:35:15.600000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { perfmon } for pid=2741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit[2741]: AVC avc: denied { bpf } for pid=2741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:15.600000 audit: BPF prog-id=144 op=LOAD Oct 2 19:35:15.600000 audit[2741]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0002e5f88 items=0 ppid=2452 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:15.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166303239343530393131643966633139336230353663623865396132 Oct 2 19:35:15.644378 env[1047]: time="2023-10-02T19:35:15.644320892Z" level=info msg="StartContainer for \"af029450911d9fc193b056cb8e9a28767b2e23839a3c3a008ca4d99302036eb5\" returns successfully" Oct 2 19:35:17.089944 kubelet[1970]: E1002 19:35:17.089861 1970 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:17.608822 env[1047]: time="2023-10-02T19:35:17.608713862Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:35:17.618860 systemd[1]: cri-containerd-af029450911d9fc193b056cb8e9a28767b2e23839a3c3a008ca4d99302036eb5.scope: Deactivated successfully. Oct 2 19:35:17.624000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:35:17.661114 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-af029450911d9fc193b056cb8e9a28767b2e23839a3c3a008ca4d99302036eb5-rootfs.mount: Deactivated successfully. Oct 2 19:35:17.690057 env[1047]: time="2023-10-02T19:35:17.689978835Z" level=info msg="shim disconnected" id=af029450911d9fc193b056cb8e9a28767b2e23839a3c3a008ca4d99302036eb5 Oct 2 19:35:17.690311 env[1047]: time="2023-10-02T19:35:17.690276097Z" level=warning msg="cleaning up after shim disconnected" id=af029450911d9fc193b056cb8e9a28767b2e23839a3c3a008ca4d99302036eb5 namespace=k8s.io Oct 2 19:35:17.690434 env[1047]: time="2023-10-02T19:35:17.690407535Z" level=info msg="cleaning up dead shim" Oct 2 19:35:17.714097 env[1047]: time="2023-10-02T19:35:17.714018826Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:35:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2790 runtime=io.containerd.runc.v2\n" Oct 2 19:35:18.191927 env[1047]: time="2023-10-02T19:35:18.191862658Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:35:25.997274 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2279462195.mount: Deactivated successfully. Oct 2 19:35:26.100687 env[1047]: time="2023-10-02T19:35:26.100062836Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:26.104977 env[1047]: time="2023-10-02T19:35:26.104888104Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:26.108305 env[1047]: time="2023-10-02T19:35:26.108253067Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:26.111457 env[1047]: time="2023-10-02T19:35:26.111342950Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:26.113230 env[1047]: time="2023-10-02T19:35:26.113131016Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e\"" Oct 2 19:35:26.122475 env[1047]: time="2023-10-02T19:35:26.122398299Z" level=info msg="CreateContainer within sandbox \"ce70112f5c57e21364a06d1ccb3daa8152ec53948dcb27857680ab89caf306d7\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:35:26.150811 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2777856094.mount: Deactivated successfully. Oct 2 19:35:26.195623 env[1047]: time="2023-10-02T19:35:26.195476213Z" level=info msg="CreateContainer within sandbox \"ce70112f5c57e21364a06d1ccb3daa8152ec53948dcb27857680ab89caf306d7\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87\"" Oct 2 19:35:26.199850 env[1047]: time="2023-10-02T19:35:26.197602998Z" level=info msg="StartContainer for \"fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87\"" Oct 2 19:35:26.251964 systemd[1]: Started cri-containerd-fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87.scope. Oct 2 19:35:26.288852 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 19:35:26.288953 kernel: audit: type=1400 audit(1696275326.278:1132): avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288984 kernel: audit: type=1300 audit(1696275326.278:1132): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2452 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2452 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:26.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376131636435383564626232333262326438626531343165626439 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.298772 kernel: audit: type=1327 audit(1696275326.278:1132): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376131636435383564626232333262326438626531343165626439 Oct 2 19:35:26.298830 kernel: audit: type=1400 audit(1696275326.278:1133): avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.303618 kernel: audit: type=1400 audit(1696275326.278:1133): avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.310664 kernel: audit: type=1400 audit(1696275326.278:1133): avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.310715 kernel: audit: type=1400 audit(1696275326.278:1133): avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.318947 kernel: audit: type=1400 audit(1696275326.278:1133): avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.319027 kernel: audit: type=1400 audit(1696275326.278:1133): avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.322602 kernel: audit: type=1400 audit(1696275326.278:1133): avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.278000 audit: BPF prog-id=145 op=LOAD Oct 2 19:35:26.278000 audit[2815]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c00017cc90 items=0 ppid=2452 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:26.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376131636435383564626232333262326438626531343165626439 Oct 2 19:35:26.288000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.288000 audit: BPF prog-id=146 op=LOAD Oct 2 19:35:26.288000 audit[2815]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c00017ccd8 items=0 ppid=2452 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:26.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376131636435383564626232333262326438626531343165626439 Oct 2 19:35:26.289000 audit: BPF prog-id=146 op=UNLOAD Oct 2 19:35:26.289000 audit: BPF prog-id=145 op=UNLOAD Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { perfmon } for pid=2815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit[2815]: AVC avc: denied { bpf } for pid=2815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:26.289000 audit: BPF prog-id=147 op=LOAD Oct 2 19:35:26.289000 audit[2815]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c00017cd68 items=0 ppid=2452 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:26.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376131636435383564626232333262326438626531343165626439 Oct 2 19:35:26.333667 env[1047]: time="2023-10-02T19:35:26.333619564Z" level=info msg="StartContainer for \"fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87\" returns successfully" Oct 2 19:35:26.428838 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:35:26.428988 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:35:27.312938 systemd[1]: run-containerd-runc-k8s.io-fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87-runc.WSUuFr.mount: Deactivated successfully. Oct 2 19:35:27.829532 kubelet[1970]: I1002 19:35:27.828351 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:35:27.834099 kubelet[1970]: I1002 19:35:27.834076 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:35:27.835443 kubelet[1970]: I1002 19:35:27.835426 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:35:27.841346 systemd[1]: Created slice kubepods-besteffort-pod7772c3dc_4b27_4d9d_b4f4_3ce37d703c99.slice. Oct 2 19:35:27.848864 systemd[1]: Created slice kubepods-burstable-pod7cc0d058_5b72_4a4e_aeee_5a55d332c96c.slice. Oct 2 19:35:27.854301 systemd[1]: Created slice kubepods-burstable-pod48fe2fdd_34bc_4667_98d9_080c50938eea.slice. Oct 2 19:35:27.877802 kubelet[1970]: I1002 19:35:27.877777 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:35:27.883218 systemd[1]: Created slice kubepods-besteffort-podc0558673_0111_40e1_9aec_1a6d647d8618.slice. Oct 2 19:35:27.946849 kubelet[1970]: I1002 19:35:27.946817 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/c0558673-0111-40e1-9aec-1a6d647d8618-varrun\") pod \"csi-node-driver-k28x6\" (UID: \"c0558673-0111-40e1-9aec-1a6d647d8618\") " pod="calico-system/csi-node-driver-k28x6" Oct 2 19:35:27.947679 kubelet[1970]: I1002 19:35:27.947646 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7cc0d058-5b72-4a4e-aeee-5a55d332c96c-config-volume\") pod \"coredns-565d847f94-b6g96\" (UID: \"7cc0d058-5b72-4a4e-aeee-5a55d332c96c\") " pod="kube-system/coredns-565d847f94-b6g96" Oct 2 19:35:27.947745 kubelet[1970]: I1002 19:35:27.947714 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2sw5b\" (UniqueName: \"kubernetes.io/projected/c0558673-0111-40e1-9aec-1a6d647d8618-kube-api-access-2sw5b\") pod \"csi-node-driver-k28x6\" (UID: \"c0558673-0111-40e1-9aec-1a6d647d8618\") " pod="calico-system/csi-node-driver-k28x6" Oct 2 19:35:27.947745 kubelet[1970]: I1002 19:35:27.947744 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-27n4p\" (UniqueName: \"kubernetes.io/projected/7cc0d058-5b72-4a4e-aeee-5a55d332c96c-kube-api-access-27n4p\") pod \"coredns-565d847f94-b6g96\" (UID: \"7cc0d058-5b72-4a4e-aeee-5a55d332c96c\") " pod="kube-system/coredns-565d847f94-b6g96" Oct 2 19:35:27.947814 kubelet[1970]: I1002 19:35:27.947772 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/c0558673-0111-40e1-9aec-1a6d647d8618-registration-dir\") pod \"csi-node-driver-k28x6\" (UID: \"c0558673-0111-40e1-9aec-1a6d647d8618\") " pod="calico-system/csi-node-driver-k28x6" Oct 2 19:35:27.947814 kubelet[1970]: I1002 19:35:27.947805 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/c0558673-0111-40e1-9aec-1a6d647d8618-kubelet-dir\") pod \"csi-node-driver-k28x6\" (UID: \"c0558673-0111-40e1-9aec-1a6d647d8618\") " pod="calico-system/csi-node-driver-k28x6" Oct 2 19:35:27.949052 kubelet[1970]: I1002 19:35:27.949032 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/48fe2fdd-34bc-4667-98d9-080c50938eea-config-volume\") pod \"coredns-565d847f94-fl9gt\" (UID: \"48fe2fdd-34bc-4667-98d9-080c50938eea\") " pod="kube-system/coredns-565d847f94-fl9gt" Oct 2 19:35:27.949125 kubelet[1970]: I1002 19:35:27.949077 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g9dcg\" (UniqueName: \"kubernetes.io/projected/48fe2fdd-34bc-4667-98d9-080c50938eea-kube-api-access-g9dcg\") pod \"coredns-565d847f94-fl9gt\" (UID: \"48fe2fdd-34bc-4667-98d9-080c50938eea\") " pod="kube-system/coredns-565d847f94-fl9gt" Oct 2 19:35:27.949125 kubelet[1970]: I1002 19:35:27.949108 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/c0558673-0111-40e1-9aec-1a6d647d8618-etccalico\") pod \"csi-node-driver-k28x6\" (UID: \"c0558673-0111-40e1-9aec-1a6d647d8618\") " pod="calico-system/csi-node-driver-k28x6" Oct 2 19:35:27.949188 kubelet[1970]: I1002 19:35:27.949135 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/c0558673-0111-40e1-9aec-1a6d647d8618-socket-dir\") pod \"csi-node-driver-k28x6\" (UID: \"c0558673-0111-40e1-9aec-1a6d647d8618\") " pod="calico-system/csi-node-driver-k28x6" Oct 2 19:35:27.949188 kubelet[1970]: I1002 19:35:27.949175 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9gmvt\" (UniqueName: \"kubernetes.io/projected/7772c3dc-4b27-4d9d-b4f4-3ce37d703c99-kube-api-access-9gmvt\") pod \"calico-kube-controllers-69d9c784fb-6rj88\" (UID: \"7772c3dc-4b27-4d9d-b4f4-3ce37d703c99\") " pod="calico-system/calico-kube-controllers-69d9c784fb-6rj88" Oct 2 19:35:27.992000 audit[2936]: AVC avc: denied { write } for pid=2936 comm="tee" name="fd" dev="proc" ino=22284 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:35:27.994000 audit[2938]: AVC avc: denied { write } for pid=2938 comm="tee" name="fd" dev="proc" ino=23213 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:35:27.994000 audit[2938]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc169b9962 a2=241 a3=1b6 items=1 ppid=2905 pid=2938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:27.994000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:35:27.994000 audit: PATH item=0 name="/dev/fd/63" inode=23207 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:35:27.994000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:35:27.992000 audit[2936]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc69c94961 a2=241 a3=1b6 items=1 ppid=2918 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:27.992000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:35:27.992000 audit: PATH item=0 name="/dev/fd/63" inode=22275 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:35:27.992000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:35:28.007000 audit[2943]: AVC avc: denied { write } for pid=2943 comm="tee" name="fd" dev="proc" ino=23224 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:35:28.007000 audit[2943]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc0cbf8963 a2=241 a3=1b6 items=1 ppid=2908 pid=2943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:28.007000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:35:28.007000 audit: PATH item=0 name="/dev/fd/63" inode=23210 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:35:28.009000 audit[2950]: AVC avc: denied { write } for pid=2950 comm="tee" name="fd" dev="proc" ino=23228 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:35:28.009000 audit[2950]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc90b64952 a2=241 a3=1b6 items=1 ppid=2906 pid=2950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:28.009000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:35:28.009000 audit: PATH item=0 name="/dev/fd/63" inode=23217 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:35:28.011000 audit[2954]: AVC avc: denied { write } for pid=2954 comm="tee" name="fd" dev="proc" ino=23232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:35:28.011000 audit[2954]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffcced1961 a2=241 a3=1b6 items=1 ppid=2911 pid=2954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:28.011000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:35:28.007000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:35:28.009000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:35:28.014000 audit[2952]: AVC avc: denied { write } for pid=2952 comm="tee" name="fd" dev="proc" ino=23236 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:35:28.011000 audit: PATH item=0 name="/dev/fd/63" inode=23220 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:35:28.011000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:35:28.014000 audit[2952]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff5ec3e961 a2=241 a3=1b6 items=1 ppid=2916 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:28.014000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:35:28.014000 audit: PATH item=0 name="/dev/fd/63" inode=22287 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:35:28.014000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:35:28.026000 audit[2957]: AVC avc: denied { write } for pid=2957 comm="tee" name="fd" dev="proc" ino=23246 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:35:28.026000 audit[2957]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd37576951 a2=241 a3=1b6 items=1 ppid=2904 pid=2957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:28.026000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:35:28.026000 audit: PATH item=0 name="/dev/fd/63" inode=23221 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:35:28.026000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:35:28.161751 env[1047]: time="2023-10-02T19:35:28.161609004Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-fl9gt,Uid:48fe2fdd-34bc-4667-98d9-080c50938eea,Namespace:kube-system,Attempt:0,}" Oct 2 19:35:28.186807 env[1047]: time="2023-10-02T19:35:28.186764389Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k28x6,Uid:c0558673-0111-40e1-9aec-1a6d647d8618,Namespace:calico-system,Attempt:0,}" Oct 2 19:35:28.330282 systemd[1]: run-containerd-runc-k8s.io-fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87-runc.LTC7dT.mount: Deactivated successfully. Oct 2 19:35:28.453470 env[1047]: time="2023-10-02T19:35:28.453431338Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-b6g96,Uid:7cc0d058-5b72-4a4e-aeee-5a55d332c96c,Namespace:kube-system,Attempt:0,}" Oct 2 19:35:28.747096 env[1047]: time="2023-10-02T19:35:28.746987493Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d9c784fb-6rj88,Uid:7772c3dc-4b27-4d9d-b4f4-3ce37d703c99,Namespace:calico-system,Attempt:0,}" Oct 2 19:35:28.957594 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4741e6a4db6: link becomes ready Oct 2 19:35:28.960351 systemd-networkd[967]: cali4741e6a4db6: Link UP Oct 2 19:35:28.961102 systemd-networkd[967]: cali4741e6a4db6: Gained carrier Oct 2 19:35:28.995437 systemd-networkd[967]: calibbbd4565e40: Link UP Oct 2 19:35:28.995442 systemd-networkd[967]: calibbbd4565e40: Gained carrier Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.403 [INFO][3000] utils.go 108: File /var/lib/calico/mtu does not exist Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.475 [INFO][3000] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0 coredns-565d847f94- kube-system 48fe2fdd-34bc-4667-98d9-080c50938eea 660 0 2023-10-02 19:34:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:565d847f94 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-0-f-8986abdbb8.novalocal coredns-565d847f94-fl9gt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4741e6a4db6 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Namespace="kube-system" Pod="coredns-565d847f94-fl9gt" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.476 [INFO][3000] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Namespace="kube-system" Pod="coredns-565d847f94-fl9gt" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.826 [INFO][3047] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" HandleID="k8s-pod-network.c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.859 [INFO][3047] ipam_plugin.go 269: Auto assigning IP ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" HandleID="k8s-pod-network.c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004d6e0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-0-f-8986abdbb8.novalocal", "pod":"coredns-565d847f94-fl9gt", "timestamp":"2023-10-02 19:35:28.826113501 +0000 UTC"}, Hostname:"ci-3510-3-0-f-8986abdbb8.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:35:29.001271 env[1047]: time="2023-10-02T19:35:28Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:35:29.001271 env[1047]: time="2023-10-02T19:35:28Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.859 [INFO][3047] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-f-8986abdbb8.novalocal' Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.865 [INFO][3047] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.875 [INFO][3047] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.880 [INFO][3047] ipam.go 489: Trying affinity for 192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.886 [INFO][3047] ipam.go 155: Attempting to load block cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.891 [INFO][3047] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.891 [INFO][3047] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.90.192/26 handle="k8s-pod-network.c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.893 [INFO][3047] ipam.go 1682: Creating new handle: k8s-pod-network.c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777 Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.897 [INFO][3047] ipam.go 1203: Writing block in order to claim IPs block=192.168.90.192/26 handle="k8s-pod-network.c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.905 [INFO][3047] ipam.go 1216: Successfully claimed IPs: [192.168.90.193/26] block=192.168.90.192/26 handle="k8s-pod-network.c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.905 [INFO][3047] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.90.193/26] handle="k8s-pod-network.c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.001271 env[1047]: time="2023-10-02T19:35:28Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:35:29.001271 env[1047]: 2023-10-02 19:35:28.905 [INFO][3047] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.90.193/26] IPv6=[] ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" HandleID="k8s-pod-network.c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" Oct 2 19:35:29.052006 env[1047]: 2023-10-02 19:35:28.908 [INFO][3000] k8s.go 383: Populated endpoint ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Namespace="kube-system" Pod="coredns-565d847f94-fl9gt" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"48fe2fdd-34bc-4667-98d9-080c50938eea", ResourceVersion:"660", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"", Pod:"coredns-565d847f94-fl9gt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.90.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4741e6a4db6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:29.052006 env[1047]: 2023-10-02 19:35:28.908 [INFO][3000] k8s.go 384: Calico CNI using IPs: [192.168.90.193/32] ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Namespace="kube-system" Pod="coredns-565d847f94-fl9gt" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" Oct 2 19:35:29.052006 env[1047]: 2023-10-02 19:35:28.908 [INFO][3000] dataplane_linux.go 68: Setting the host side veth name to cali4741e6a4db6 ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Namespace="kube-system" Pod="coredns-565d847f94-fl9gt" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" Oct 2 19:35:29.052006 env[1047]: 2023-10-02 19:35:28.949 [INFO][3000] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Namespace="kube-system" Pod="coredns-565d847f94-fl9gt" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" Oct 2 19:35:29.052006 env[1047]: 2023-10-02 19:35:28.957 [INFO][3000] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Namespace="kube-system" Pod="coredns-565d847f94-fl9gt" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"48fe2fdd-34bc-4667-98d9-080c50938eea", ResourceVersion:"660", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777", Pod:"coredns-565d847f94-fl9gt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.90.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4741e6a4db6", MAC:"3a:c5:31:6a:79:86", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:29.052006 env[1047]: 2023-10-02 19:35:28.999 [INFO][3000] k8s.go 489: Wrote updated endpoint to datastore ContainerID="c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777" Namespace="kube-system" Pod="coredns-565d847f94-fl9gt" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--fl9gt-eth0" Oct 2 19:35:29.052006 env[1047]: 2023-10-02 19:35:28.520 [INFO][3035] utils.go 108: File /var/lib/calico/mtu does not exist Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.533 [INFO][3035] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0 coredns-565d847f94- kube-system 7cc0d058-5b72-4a4e-aeee-5a55d332c96c 659 0 2023-10-02 19:34:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:565d847f94 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-0-f-8986abdbb8.novalocal coredns-565d847f94-b6g96 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calibbbd4565e40 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Namespace="kube-system" Pod="coredns-565d847f94-b6g96" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.533 [INFO][3035] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Namespace="kube-system" Pod="coredns-565d847f94-b6g96" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.826 [INFO][3065] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" HandleID="k8s-pod-network.beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.858 [INFO][3065] ipam_plugin.go 269: Auto assigning IP ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" HandleID="k8s-pod-network.beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000133770), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-0-f-8986abdbb8.novalocal", "pod":"coredns-565d847f94-b6g96", "timestamp":"2023-10-02 19:35:28.826469253 +0000 UTC"}, Hostname:"ci-3510-3-0-f-8986abdbb8.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:35:29.052316 env[1047]: time="2023-10-02T19:35:28Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:35:29.052316 env[1047]: time="2023-10-02T19:35:28Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.906 [INFO][3065] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-f-8986abdbb8.novalocal' Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.909 [INFO][3065] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.915 [INFO][3065] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.934 [INFO][3065] ipam.go 489: Trying affinity for 192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.942 [INFO][3065] ipam.go 155: Attempting to load block cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.948 [INFO][3065] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.948 [INFO][3065] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.90.192/26 handle="k8s-pod-network.beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.951 [INFO][3065] ipam.go 1682: Creating new handle: k8s-pod-network.beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.964 [INFO][3065] ipam.go 1203: Writing block in order to claim IPs block=192.168.90.192/26 handle="k8s-pod-network.beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.977 [INFO][3065] ipam.go 1216: Successfully claimed IPs: [192.168.90.194/26] block=192.168.90.192/26 handle="k8s-pod-network.beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.977 [INFO][3065] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.90.194/26] handle="k8s-pod-network.beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.052316 env[1047]: time="2023-10-02T19:35:28Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:35:29.052316 env[1047]: 2023-10-02 19:35:28.977 [INFO][3065] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.90.194/26] IPv6=[] ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" HandleID="k8s-pod-network.beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" Oct 2 19:35:29.052926 env[1047]: 2023-10-02 19:35:28.981 [INFO][3035] k8s.go 383: Populated endpoint ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Namespace="kube-system" Pod="coredns-565d847f94-b6g96" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"7cc0d058-5b72-4a4e-aeee-5a55d332c96c", ResourceVersion:"659", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"", Pod:"coredns-565d847f94-b6g96", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.90.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibbbd4565e40", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:29.052926 env[1047]: 2023-10-02 19:35:28.981 [INFO][3035] k8s.go 384: Calico CNI using IPs: [192.168.90.194/32] ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Namespace="kube-system" Pod="coredns-565d847f94-b6g96" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" Oct 2 19:35:29.052926 env[1047]: 2023-10-02 19:35:28.981 [INFO][3035] dataplane_linux.go 68: Setting the host side veth name to calibbbd4565e40 ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Namespace="kube-system" Pod="coredns-565d847f94-b6g96" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" Oct 2 19:35:29.052926 env[1047]: 2023-10-02 19:35:28.982 [INFO][3035] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Namespace="kube-system" Pod="coredns-565d847f94-b6g96" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" Oct 2 19:35:29.052926 env[1047]: 2023-10-02 19:35:28.995 [INFO][3035] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Namespace="kube-system" Pod="coredns-565d847f94-b6g96" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0", GenerateName:"coredns-565d847f94-", Namespace:"kube-system", SelfLink:"", UID:"7cc0d058-5b72-4a4e-aeee-5a55d332c96c", ResourceVersion:"659", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"565d847f94", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e", Pod:"coredns-565d847f94-b6g96", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.90.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibbbd4565e40", MAC:"52:3f:76:2e:31:ef", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:29.052926 env[1047]: 2023-10-02 19:35:29.014 [INFO][3035] k8s.go 489: Wrote updated endpoint to datastore ContainerID="beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e" Namespace="kube-system" Pod="coredns-565d847f94-b6g96" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-coredns--565d847f94--b6g96-eth0" Oct 2 19:35:29.147596 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali470bab5d575: link becomes ready Oct 2 19:35:29.151168 env[1047]: time="2023-10-02T19:35:29.151097078Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:35:29.151662 env[1047]: time="2023-10-02T19:35:29.151141382Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:35:29.151662 env[1047]: time="2023-10-02T19:35:29.151154467Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:35:29.151662 env[1047]: time="2023-10-02T19:35:29.151374471Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e pid=3184 runtime=io.containerd.runc.v2 Oct 2 19:35:29.173177 systemd-networkd[967]: cali470bab5d575: Link UP Oct 2 19:35:29.173184 systemd-networkd[967]: cali470bab5d575: Gained carrier Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:28.451 [INFO][3007] utils.go 108: File /var/lib/calico/mtu does not exist Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:28.475 [INFO][3007] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0 csi-node-driver- calico-system c0558673-0111-40e1-9aec-1a6d647d8618 661 0 2023-10-02 19:35:27 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:fd56fb8dc k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510-3-0-f-8986abdbb8.novalocal csi-node-driver-k28x6 eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali470bab5d575 [] []}} ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Namespace="calico-system" Pod="csi-node-driver-k28x6" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:28.476 [INFO][3007] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Namespace="calico-system" Pod="csi-node-driver-k28x6" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:28.825 [INFO][3048] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" HandleID="k8s-pod-network.9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:28.860 [INFO][3048] ipam_plugin.go 269: Auto assigning IP ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" HandleID="k8s-pod-network.9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d1160), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-0-f-8986abdbb8.novalocal", "pod":"csi-node-driver-k28x6", "timestamp":"2023-10-02 19:35:28.825724948 +0000 UTC"}, Hostname:"ci-3510-3-0-f-8986abdbb8.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:35:29.187149 env[1047]: time="2023-10-02T19:35:28Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:35:29.187149 env[1047]: time="2023-10-02T19:35:28Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:28.977 [INFO][3048] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-f-8986abdbb8.novalocal' Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.019 [INFO][3048] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.083 [INFO][3048] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.114 [INFO][3048] ipam.go 489: Trying affinity for 192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.121 [INFO][3048] ipam.go 155: Attempting to load block cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.125 [INFO][3048] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.125 [INFO][3048] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.90.192/26 handle="k8s-pod-network.9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.127 [INFO][3048] ipam.go 1682: Creating new handle: k8s-pod-network.9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2 Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.132 [INFO][3048] ipam.go 1203: Writing block in order to claim IPs block=192.168.90.192/26 handle="k8s-pod-network.9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.139 [INFO][3048] ipam.go 1216: Successfully claimed IPs: [192.168.90.195/26] block=192.168.90.192/26 handle="k8s-pod-network.9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.139 [INFO][3048] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.90.195/26] handle="k8s-pod-network.9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.187149 env[1047]: time="2023-10-02T19:35:29Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:35:29.187149 env[1047]: 2023-10-02 19:35:29.139 [INFO][3048] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.90.195/26] IPv6=[] ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" HandleID="k8s-pod-network.9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" Oct 2 19:35:29.188659 env[1047]: 2023-10-02 19:35:29.144 [INFO][3007] k8s.go 383: Populated endpoint ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Namespace="calico-system" Pod="csi-node-driver-k28x6" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c0558673-0111-40e1-9aec-1a6d647d8618", ResourceVersion:"661", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 35, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"fd56fb8dc", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"", Pod:"csi-node-driver-k28x6", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.90.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali470bab5d575", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:29.188659 env[1047]: 2023-10-02 19:35:29.144 [INFO][3007] k8s.go 384: Calico CNI using IPs: [192.168.90.195/32] ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Namespace="calico-system" Pod="csi-node-driver-k28x6" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" Oct 2 19:35:29.188659 env[1047]: 2023-10-02 19:35:29.144 [INFO][3007] dataplane_linux.go 68: Setting the host side veth name to cali470bab5d575 ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Namespace="calico-system" Pod="csi-node-driver-k28x6" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" Oct 2 19:35:29.188659 env[1047]: 2023-10-02 19:35:29.148 [INFO][3007] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Namespace="calico-system" Pod="csi-node-driver-k28x6" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" Oct 2 19:35:29.188659 env[1047]: 2023-10-02 19:35:29.167 [INFO][3007] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Namespace="calico-system" Pod="csi-node-driver-k28x6" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c0558673-0111-40e1-9aec-1a6d647d8618", ResourceVersion:"661", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 35, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"fd56fb8dc", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2", Pod:"csi-node-driver-k28x6", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.90.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali470bab5d575", MAC:"f6:86:90:e1:aa:57", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:29.188659 env[1047]: 2023-10-02 19:35:29.183 [INFO][3007] k8s.go 489: Wrote updated endpoint to datastore ContainerID="9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2" Namespace="calico-system" Pod="csi-node-driver-k28x6" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-csi--node--driver--k28x6-eth0" Oct 2 19:35:29.194328 env[1047]: time="2023-10-02T19:35:29.194233285Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:35:29.194448 env[1047]: time="2023-10-02T19:35:29.194341159Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:35:29.194448 env[1047]: time="2023-10-02T19:35:29.194373359Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:35:29.194741 env[1047]: time="2023-10-02T19:35:29.194700767Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777 pid=3177 runtime=io.containerd.runc.v2 Oct 2 19:35:29.207393 systemd[1]: run-containerd-runc-k8s.io-beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e-runc.JPtoKN.mount: Deactivated successfully. Oct 2 19:35:29.214844 systemd[1]: Started cri-containerd-beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e.scope. Oct 2 19:35:29.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.238000 audit: BPF prog-id=148 op=LOAD Oct 2 19:35:29.240000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.240000 audit[3200]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3184 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265623035636465363064343336636665613638363065303930363038 Oct 2 19:35:29.240000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.240000 audit[3200]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3184 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265623035636465363064343336636665613638363065303930363038 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.243000 audit: BPF prog-id=149 op=LOAD Oct 2 19:35:29.243000 audit[3200]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000216510 items=0 ppid=3184 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265623035636465363064343336636665613638363065303930363038 Oct 2 19:35:29.244000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.244000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.244000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.244000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.244000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.244000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.244000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.244000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.244000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.244000 audit: BPF prog-id=150 op=LOAD Oct 2 19:35:29.244000 audit[3200]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000216558 items=0 ppid=3184 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265623035636465363064343336636665613638363065303930363038 Oct 2 19:35:29.245000 audit: BPF prog-id=150 op=UNLOAD Oct 2 19:35:29.245000 audit: BPF prog-id=149 op=UNLOAD Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { perfmon } for pid=3200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit[3200]: AVC avc: denied { bpf } for pid=3200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.245000 audit: BPF prog-id=151 op=LOAD Oct 2 19:35:29.245000 audit[3200]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000216968 items=0 ppid=3184 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265623035636465363064343336636665613638363065303930363038 Oct 2 19:35:29.268878 systemd[1]: Started cri-containerd-c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777.scope. Oct 2 19:35:29.273282 env[1047]: time="2023-10-02T19:35:29.268897263Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:35:29.273282 env[1047]: time="2023-10-02T19:35:29.268971683Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:35:29.273282 env[1047]: time="2023-10-02T19:35:29.269000949Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:35:29.273282 env[1047]: time="2023-10-02T19:35:29.269147114Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2 pid=3244 runtime=io.containerd.runc.v2 Oct 2 19:35:29.279594 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8c458d50a3a: link becomes ready Oct 2 19:35:29.288505 systemd-networkd[967]: cali8c458d50a3a: Link UP Oct 2 19:35:29.288511 systemd-networkd[967]: cali8c458d50a3a: Gained carrier Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.305000 audit: BPF prog-id=152 op=LOAD Oct 2 19:35:29.307000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:28.879 [INFO][3108] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0 calico-kube-controllers-69d9c784fb- calico-system 7772c3dc-4b27-4d9d-b4f4-3ce37d703c99 653 0 2023-10-02 19:34:58 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:69d9c784fb projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510-3-0-f-8986abdbb8.novalocal calico-kube-controllers-69d9c784fb-6rj88 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali8c458d50a3a [] []}} ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-6rj88" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:28.879 [INFO][3108] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-6rj88" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.007 [INFO][3126] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" HandleID="k8s-pod-network.8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.088 [INFO][3126] ipam_plugin.go 269: Auto assigning IP ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" HandleID="k8s-pod-network.8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004dfb0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-0-f-8986abdbb8.novalocal", "pod":"calico-kube-controllers-69d9c784fb-6rj88", "timestamp":"2023-10-02 19:35:29.007016744 +0000 UTC"}, Hostname:"ci-3510-3-0-f-8986abdbb8.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:35:29.317032 env[1047]: time="2023-10-02T19:35:29Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:35:29.317032 env[1047]: time="2023-10-02T19:35:29Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.140 [INFO][3126] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-f-8986abdbb8.novalocal' Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.161 [INFO][3126] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.189 [INFO][3126] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.196 [INFO][3126] ipam.go 489: Trying affinity for 192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.210 [INFO][3126] ipam.go 155: Attempting to load block cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.220 [INFO][3126] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.220 [INFO][3126] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.90.192/26 handle="k8s-pod-network.8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.226 [INFO][3126] ipam.go 1682: Creating new handle: k8s-pod-network.8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.241 [INFO][3126] ipam.go 1203: Writing block in order to claim IPs block=192.168.90.192/26 handle="k8s-pod-network.8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.262 [INFO][3126] ipam.go 1216: Successfully claimed IPs: [192.168.90.196/26] block=192.168.90.192/26 handle="k8s-pod-network.8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.262 [INFO][3126] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.90.196/26] handle="k8s-pod-network.8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:29.317032 env[1047]: time="2023-10-02T19:35:29Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:35:29.317032 env[1047]: 2023-10-02 19:35:29.262 [INFO][3126] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.90.196/26] IPv6=[] ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" HandleID="k8s-pod-network.8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" Oct 2 19:35:29.317783 env[1047]: 2023-10-02 19:35:29.276 [INFO][3108] k8s.go 383: Populated endpoint ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-6rj88" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0", GenerateName:"calico-kube-controllers-69d9c784fb-", Namespace:"calico-system", SelfLink:"", UID:"7772c3dc-4b27-4d9d-b4f4-3ce37d703c99", ResourceVersion:"653", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 34, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d9c784fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"", Pod:"calico-kube-controllers-69d9c784fb-6rj88", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.90.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali8c458d50a3a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:29.317783 env[1047]: 2023-10-02 19:35:29.276 [INFO][3108] k8s.go 384: Calico CNI using IPs: [192.168.90.196/32] ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-6rj88" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" Oct 2 19:35:29.317783 env[1047]: 2023-10-02 19:35:29.277 [INFO][3108] dataplane_linux.go 68: Setting the host side veth name to cali8c458d50a3a ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-6rj88" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" Oct 2 19:35:29.317783 env[1047]: 2023-10-02 19:35:29.279 [INFO][3108] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-6rj88" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" Oct 2 19:35:29.317783 env[1047]: 2023-10-02 19:35:29.289 [INFO][3108] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-6rj88" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0", GenerateName:"calico-kube-controllers-69d9c784fb-", Namespace:"calico-system", SelfLink:"", UID:"7772c3dc-4b27-4d9d-b4f4-3ce37d703c99", ResourceVersion:"653", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 34, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d9c784fb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb", Pod:"calico-kube-controllers-69d9c784fb-6rj88", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.90.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali8c458d50a3a", MAC:"d2:76:bf:b3:b0:6d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:29.317783 env[1047]: 2023-10-02 19:35:29.313 [INFO][3108] k8s.go 489: Wrote updated endpoint to datastore ContainerID="8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb" Namespace="calico-system" Pod="calico-kube-controllers-69d9c784fb-6rj88" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--kube--controllers--69d9c784fb--6rj88-eth0" Oct 2 19:35:29.307000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3177 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313837346531646433666563366266306562663830646363653337 Oct 2 19:35:29.319000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.319000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3177 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313837346531646433666563366266306562663830646363653337 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.321000 audit: BPF prog-id=153 op=LOAD Oct 2 19:35:29.321000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000388340 items=0 ppid=3177 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313837346531646433666563366266306562663830646363653337 Oct 2 19:35:29.326000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.326000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.326000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.326000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.326000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.326000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.326000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.326000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.326000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.326000 audit: BPF prog-id=154 op=LOAD Oct 2 19:35:29.326000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000388388 items=0 ppid=3177 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313837346531646433666563366266306562663830646363653337 Oct 2 19:35:29.328000 audit: BPF prog-id=154 op=UNLOAD Oct 2 19:35:29.328000 audit: BPF prog-id=153 op=UNLOAD Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.328000 audit: BPF prog-id=155 op=LOAD Oct 2 19:35:29.328000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000388798 items=0 ppid=3177 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313837346531646433666563366266306562663830646363653337 Oct 2 19:35:29.334585 systemd[1]: Started cri-containerd-9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2.scope. Oct 2 19:35:29.344542 env[1047]: time="2023-10-02T19:35:29.344454507Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-b6g96,Uid:7cc0d058-5b72-4a4e-aeee-5a55d332c96c,Namespace:kube-system,Attempt:0,} returns sandbox id \"beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e\"" Oct 2 19:35:29.354345 env[1047]: time="2023-10-02T19:35:29.354298462Z" level=info msg="CreateContainer within sandbox \"beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:35:29.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.375000 audit: BPF prog-id=156 op=LOAD Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3244 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937313764363562363966613031663763633638326536623535363432 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3244 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937313764363562363966613031663763633638326536623535363432 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.376000 audit: BPF prog-id=157 op=LOAD Oct 2 19:35:29.376000 audit[3253]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000367470 items=0 ppid=3244 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937313764363562363966613031663763633638326536623535363432 Oct 2 19:35:29.379000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.379000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.379000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.379000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.379000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.379000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.379000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.379000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.379000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.379000 audit: BPF prog-id=158 op=LOAD Oct 2 19:35:29.379000 audit[3253]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003674b8 items=0 ppid=3244 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937313764363562363966613031663763633638326536623535363432 Oct 2 19:35:29.380000 audit: BPF prog-id=158 op=UNLOAD Oct 2 19:35:29.380000 audit: BPF prog-id=157 op=UNLOAD Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { perfmon } for pid=3253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit[3253]: AVC avc: denied { bpf } for pid=3253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.380000 audit: BPF prog-id=159 op=LOAD Oct 2 19:35:29.380000 audit[3253]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003678c8 items=0 ppid=3244 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937313764363562363966613031663763633638326536623535363432 Oct 2 19:35:29.403768 env[1047]: time="2023-10-02T19:35:29.403722804Z" level=info msg="CreateContainer within sandbox \"beb05cde60d436cfea6860e0906083b44fdaf1eb01da652ef1ba0e49a640989e\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"434be988e645682c47f508a16bed4d13c046b8679b1ce808d0571e1b32b32092\"" Oct 2 19:35:29.406581 env[1047]: time="2023-10-02T19:35:29.406534269Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-565d847f94-fl9gt,Uid:48fe2fdd-34bc-4667-98d9-080c50938eea,Namespace:kube-system,Attempt:0,} returns sandbox id \"c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777\"" Oct 2 19:35:29.406794 env[1047]: time="2023-10-02T19:35:29.406766518Z" level=info msg="StartContainer for \"434be988e645682c47f508a16bed4d13c046b8679b1ce808d0571e1b32b32092\"" Oct 2 19:35:29.424462 env[1047]: time="2023-10-02T19:35:29.424420641Z" level=info msg="CreateContainer within sandbox \"c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:35:29.432869 env[1047]: time="2023-10-02T19:35:29.432815170Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k28x6,Uid:c0558673-0111-40e1-9aec-1a6d647d8618,Namespace:calico-system,Attempt:0,} returns sandbox id \"9717d65b69fa01f7cc682e6b55642277198ce215b8487a5d0f0ce5817745aef2\"" Oct 2 19:35:29.439283 env[1047]: time="2023-10-02T19:35:29.439242138Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:35:29.448124 env[1047]: time="2023-10-02T19:35:29.448037224Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:35:29.448124 env[1047]: time="2023-10-02T19:35:29.448090184Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:35:29.448291 env[1047]: time="2023-10-02T19:35:29.448105283Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:35:29.448397 env[1047]: time="2023-10-02T19:35:29.448340106Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb pid=3307 runtime=io.containerd.runc.v2 Oct 2 19:35:29.456510 env[1047]: time="2023-10-02T19:35:29.456444358Z" level=info msg="CreateContainer within sandbox \"c11874e1dd3fec6bf0ebf80dcce370d15c8c71d2147fe456ee390e1b753d7777\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"a5ba12a58e23c6d9fe219803a66d4c6df7e13c187c860f43ba99aa45aae53005\"" Oct 2 19:35:29.458196 env[1047]: time="2023-10-02T19:35:29.458108488Z" level=info msg="StartContainer for \"a5ba12a58e23c6d9fe219803a66d4c6df7e13c187c860f43ba99aa45aae53005\"" Oct 2 19:35:29.488546 systemd[1]: Started cri-containerd-8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb.scope. Oct 2 19:35:29.492683 systemd[1]: Started cri-containerd-434be988e645682c47f508a16bed4d13c046b8679b1ce808d0571e1b32b32092.scope. Oct 2 19:35:29.505483 systemd[1]: Started cri-containerd-a5ba12a58e23c6d9fe219803a66d4c6df7e13c187c860f43ba99aa45aae53005.scope. Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.522000 audit: BPF prog-id=160 op=LOAD Oct 2 19:35:29.526000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.526000 audit[3340]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3184 pid=3340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433346265393838653634353638326334376635303861313662656434 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3184 pid=3340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433346265393838653634353638326334376635303861313662656434 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit: BPF prog-id=161 op=LOAD Oct 2 19:35:29.527000 audit[3340]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003c4630 items=0 ppid=3184 pid=3340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433346265393838653634353638326334376635303861313662656434 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.527000 audit: BPF prog-id=162 op=LOAD Oct 2 19:35:29.527000 audit[3340]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003c4678 items=0 ppid=3184 pid=3340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433346265393838653634353638326334376635303861313662656434 Oct 2 19:35:29.528000 audit: BPF prog-id=162 op=UNLOAD Oct 2 19:35:29.528000 audit: BPF prog-id=161 op=UNLOAD Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { perfmon } for pid=3340 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.531000 audit: BPF prog-id=163 op=LOAD Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3177 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135626131326135386532336336643966653231393830336136366434 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3177 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135626131326135386532336336643966653231393830336136366434 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit[3340]: AVC avc: denied { bpf } for pid=3340 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.528000 audit: BPF prog-id=164 op=LOAD Oct 2 19:35:29.533000 audit: BPF prog-id=165 op=LOAD Oct 2 19:35:29.528000 audit[3340]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003c4a88 items=0 ppid=3184 pid=3340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.533000 audit[3339]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000333080 items=0 ppid=3177 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433346265393838653634353638326334376635303861313662656434 Oct 2 19:35:29.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135626131326135386532336336643966653231393830336136366434 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit: BPF prog-id=166 op=LOAD Oct 2 19:35:29.533000 audit[3339]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003330c8 items=0 ppid=3177 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135626131326135386532336336643966653231393830336136366434 Oct 2 19:35:29.533000 audit: BPF prog-id=166 op=UNLOAD Oct 2 19:35:29.533000 audit: BPF prog-id=165 op=UNLOAD Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { perfmon } for pid=3339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit[3339]: AVC avc: denied { bpf } for pid=3339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.533000 audit: BPF prog-id=167 op=LOAD Oct 2 19:35:29.533000 audit[3339]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003334d8 items=0 ppid=3177 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135626131326135386532336336643966653231393830336136366434 Oct 2 19:35:29.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.562000 audit: BPF prog-id=168 op=LOAD Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3307 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383263306637656261626164393261303837303331393863363037 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3307 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383263306637656261626164393261303837303331393863363037 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.565000 audit: BPF prog-id=169 op=LOAD Oct 2 19:35:29.565000 audit[3329]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d2d70 items=0 ppid=3307 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383263306637656261626164393261303837303331393863363037 Oct 2 19:35:29.566000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.566000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.566000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.566000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.566000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.566000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.566000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.566000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.566000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.566000 audit: BPF prog-id=170 op=LOAD Oct 2 19:35:29.566000 audit[3329]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d2db8 items=0 ppid=3307 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383263306637656261626164393261303837303331393863363037 Oct 2 19:35:29.566000 audit: BPF prog-id=170 op=UNLOAD Oct 2 19:35:29.567000 audit: BPF prog-id=169 op=UNLOAD Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { perfmon } for pid=3329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit[3329]: AVC avc: denied { bpf } for pid=3329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.567000 audit: BPF prog-id=171 op=LOAD Oct 2 19:35:29.567000 audit[3329]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d31c8 items=0 ppid=3307 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383263306637656261626164393261303837303331393863363037 Oct 2 19:35:29.591810 env[1047]: time="2023-10-02T19:35:29.591740407Z" level=info msg="StartContainer for \"a5ba12a58e23c6d9fe219803a66d4c6df7e13c187c860f43ba99aa45aae53005\" returns successfully" Oct 2 19:35:29.592727 env[1047]: time="2023-10-02T19:35:29.592693606Z" level=info msg="StartContainer for \"434be988e645682c47f508a16bed4d13c046b8679b1ce808d0571e1b32b32092\" returns successfully" Oct 2 19:35:29.643621 env[1047]: time="2023-10-02T19:35:29.643531405Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d9c784fb-6rj88,Uid:7772c3dc-4b27-4d9d-b4f4-3ce37d703c99,Namespace:calico-system,Attempt:0,} returns sandbox id \"8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb\"" Oct 2 19:35:29.658000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.658000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.658000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.658000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.658000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.658000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.658000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.658000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.658000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.658000 audit: BPF prog-id=172 op=LOAD Oct 2 19:35:29.658000 audit[3416]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc6359dfa0 a2=70 a3=7fe6981ec000 items=0 ppid=2917 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.658000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:35:29.660000 audit: BPF prog-id=172 op=UNLOAD Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit: BPF prog-id=173 op=LOAD Oct 2 19:35:29.660000 audit[3416]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc6359dfa0 a2=70 a3=6e items=0 ppid=2917 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.660000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:35:29.660000 audit: BPF prog-id=173 op=UNLOAD Oct 2 19:35:29.660000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.660000 audit[3416]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc6359df50 a2=70 a3=470860 items=0 ppid=2917 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.660000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:35:29.661000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.661000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.661000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.661000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.661000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.661000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.661000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.661000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.661000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.661000 audit: BPF prog-id=174 op=LOAD Oct 2 19:35:29.661000 audit[3416]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc6359df30 a2=70 a3=7ffc6359dfa0 items=0 ppid=2917 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.661000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:35:29.669000 audit: BPF prog-id=174 op=UNLOAD Oct 2 19:35:29.669000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.669000 audit[3416]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc6359e010 a2=70 a3=0 items=0 ppid=2917 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:35:29.669000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.669000 audit[3416]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc6359e000 a2=70 a3=0 items=0 ppid=2917 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:35:29.669000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.669000 audit[3416]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffc6359e040 a2=70 a3=fe00 items=0 ppid=2917 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.672000 audit: BPF prog-id=175 op=LOAD Oct 2 19:35:29.672000 audit[3416]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc6359df60 a2=70 a3=ffffffff items=0 ppid=2917 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.672000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:35:29.680531 env[1047]: time="2023-10-02T19:35:29.677167956Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:35:29.683289 env[1047]: time="2023-10-02T19:35:29.683111973Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:35:29.689075 kubelet[1970]: E1002 19:35:29.689040 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:35:29.689782 kubelet[1970]: E1002 19:35:29.689124 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:35:29.689825 env[1047]: time="2023-10-02T19:35:29.689513021Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:35:29.691194 kubelet[1970]: E1002 19:35:29.691031 1970 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-2sw5b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-k28x6_calico-system(c0558673-0111-40e1-9aec-1a6d647d8618): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:35:29.694000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.694000 audit[3429]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe07b8a310 a2=70 a3=ffff items=0 ppid=2917 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.694000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:35:29.695000 audit[3429]: AVC avc: denied { bpf } for pid=3429 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:29.695000 audit[3429]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe07b8a1e0 a2=70 a3=3 items=0 ppid=2917 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.695000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:35:29.727178 systemd-networkd[967]: vxlan.calico: Link UP Oct 2 19:35:29.727187 systemd-networkd[967]: vxlan.calico: Gained carrier Oct 2 19:35:29.739000 audit: BPF prog-id=175 op=UNLOAD Oct 2 19:35:29.904000 audit[3457]: NETFILTER_CFG table=raw:111 family=2 entries=19 op=nft_register_chain pid=3457 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:35:29.904000 audit[3457]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffe7f4b1c80 a2=0 a3=7ffe7f4b1c6c items=0 ppid=2917 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.904000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:35:29.916000 audit[3458]: NETFILTER_CFG table=nat:112 family=2 entries=16 op=nft_register_chain pid=3458 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:35:29.916000 audit[3458]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffc004c3d70 a2=0 a3=0 items=0 ppid=2917 pid=3458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.916000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:35:29.919000 audit[3459]: NETFILTER_CFG table=mangle:113 family=2 entries=19 op=nft_register_chain pid=3459 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:35:29.919000 audit[3459]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7fffb35b4c30 a2=0 a3=0 items=0 ppid=2917 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.919000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:35:29.931000 audit[3460]: NETFILTER_CFG table=filter:114 family=2 entries=157 op=nft_register_chain pid=3460 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:35:29.931000 audit[3460]: SYSCALL arch=c000003e syscall=46 success=yes exit=86820 a0=3 a1=7ffd9bb0bc70 a2=0 a3=0 items=0 ppid=2917 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:29.931000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:35:30.052305 systemd-networkd[967]: calibbbd4565e40: Gained IPv6LL Oct 2 19:35:30.308866 systemd-networkd[967]: cali4741e6a4db6: Gained IPv6LL Oct 2 19:35:30.428000 audit[3500]: NETFILTER_CFG table=filter:115 family=2 entries=9 op=nft_register_rule pid=3500 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:30.428000 audit[3500]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff506e5180 a2=0 a3=7fff506e516c items=0 ppid=2176 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:30.428000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:30.432000 audit[3500]: NETFILTER_CFG table=nat:116 family=2 entries=51 op=nft_register_chain pid=3500 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:30.432000 audit[3500]: SYSCALL arch=c000003e syscall=46 success=yes exit=19324 a0=3 a1=7fff506e5180 a2=0 a3=7fff506e516c items=0 ppid=2176 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:30.432000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:30.482000 audit[3527]: NETFILTER_CFG table=filter:117 family=2 entries=6 op=nft_register_rule pid=3527 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:30.482000 audit[3527]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff6afbe080 a2=0 a3=7fff6afbe06c items=0 ppid=2176 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:30.482000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:30.495000 audit[3527]: NETFILTER_CFG table=nat:118 family=2 entries=72 op=nft_register_chain pid=3527 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:30.495000 audit[3527]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7fff6afbe080 a2=0 a3=7fff6afbe06c items=0 ppid=2176 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:30.495000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:30.501000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:30.501000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bf7de0 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:35:30.501000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:30.500980 systemd-networkd[967]: cali470bab5d575: Gained IPv6LL Oct 2 19:35:30.502000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:30.502000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0012093e0 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:35:30.502000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:30.563995 systemd-networkd[967]: cali8c458d50a3a: Gained IPv6LL Oct 2 19:35:30.884659 systemd-networkd[967]: vxlan.calico: Gained IPv6LL Oct 2 19:35:32.865000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:32.869369 kernel: kauditd_printk_skb: 511 callbacks suppressed Oct 2 19:35:32.869465 kernel: audit: type=1400 audit(1696275332.865:1277): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:32.879646 kernel: audit: type=1400 audit(1696275332.865:1278): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:32.865000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:32.865000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00cc30840 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:35:32.900626 kernel: audit: type=1300 audit(1696275332.865:1277): arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00cc30840 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:35:32.865000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0021b2780 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:35:32.914341 kernel: audit: type=1300 audit(1696275332.865:1278): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0021b2780 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:35:32.865000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:35:32.927604 kernel: audit: type=1327 audit(1696275332.865:1278): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:35:32.865000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:35:32.866000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525615 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:32.952481 kernel: audit: type=1327 audit(1696275332.865:1277): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:35:32.952540 kernel: audit: type=1400 audit(1696275332.866:1279): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525615 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:32.952590 kernel: audit: type=1300 audit(1696275332.866:1279): arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00cc308a0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:35:32.866000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00cc308a0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:35:32.866000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:35:32.962705 kernel: audit: type=1327 audit(1696275332.866:1279): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:35:32.962751 kernel: audit: type=1400 audit(1696275332.887:1280): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525621 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:32.887000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525621 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:32.887000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00cc308d0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:35:32.887000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:35:33.045000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:33.045000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c013c91a40 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:35:33.045000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:35:33.045000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:33.045000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0021b2980 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:35:33.045000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:35:34.920067 env[1047]: time="2023-10-02T19:35:34.919919760Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:34.923428 env[1047]: time="2023-10-02T19:35:34.923357974Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:34.927235 env[1047]: time="2023-10-02T19:35:34.927183378Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:34.931297 env[1047]: time="2023-10-02T19:35:34.931254655Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:b764feb1777655aabce5988324b69b412d23e087436ee2414dff893a158fcdef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:35:34.933472 env[1047]: time="2023-10-02T19:35:34.933429207Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" returns image reference \"sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78\"" Oct 2 19:35:34.934916 env[1047]: time="2023-10-02T19:35:34.934880333Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:35:34.943613 env[1047]: time="2023-10-02T19:35:34.943492945Z" level=info msg="CreateContainer within sandbox \"8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Oct 2 19:35:34.975370 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount158639625.mount: Deactivated successfully. Oct 2 19:35:34.991054 env[1047]: time="2023-10-02T19:35:34.990880348Z" level=info msg="CreateContainer within sandbox \"8082c0f7ebabad92a08703198c607c394a794f4c378cfb9ac8ef459fc49f39eb\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071\"" Oct 2 19:35:34.994426 env[1047]: time="2023-10-02T19:35:34.993451206Z" level=info msg="StartContainer for \"66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071\"" Oct 2 19:35:35.039869 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.W2wXFL.mount: Deactivated successfully. Oct 2 19:35:35.046059 systemd[1]: Started cri-containerd-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071.scope. Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.059000 audit: BPF prog-id=176 op=LOAD Oct 2 19:35:35.060000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.060000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3307 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:35.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643739306335333538353534333531366137653930666432316638 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3307 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:35.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643739306335333538353534333531366137653930666432316638 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.061000 audit: BPF prog-id=177 op=LOAD Oct 2 19:35:35.061000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000378f10 items=0 ppid=3307 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:35.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643739306335333538353534333531366137653930666432316638 Oct 2 19:35:35.063000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.063000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.063000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.063000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.063000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.063000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.063000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.063000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.063000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.063000 audit: BPF prog-id=178 op=LOAD Oct 2 19:35:35.063000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000378f58 items=0 ppid=3307 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:35.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643739306335333538353534333531366137653930666432316638 Oct 2 19:35:35.064000 audit: BPF prog-id=178 op=UNLOAD Oct 2 19:35:35.064000 audit: BPF prog-id=177 op=UNLOAD Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { perfmon } for pid=3560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit[3560]: AVC avc: denied { bpf } for pid=3560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:35.064000 audit: BPF prog-id=179 op=LOAD Oct 2 19:35:35.064000 audit[3560]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000379368 items=0 ppid=3307 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:35.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643739306335333538353534333531366137653930666432316638 Oct 2 19:35:35.086401 env[1047]: time="2023-10-02T19:35:35.086358092Z" level=info msg="StartContainer for \"66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071\" returns successfully" Oct 2 19:35:35.196064 env[1047]: time="2023-10-02T19:35:35.195934689Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:35:35.197997 env[1047]: time="2023-10-02T19:35:35.197959517Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:35:35.198383 kubelet[1970]: E1002 19:35:35.198332 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:35:35.198383 kubelet[1970]: E1002 19:35:35.198380 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:35:35.198895 kubelet[1970]: E1002 19:35:35.198474 1970 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-2sw5b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-k28x6_calico-system(c0558673-0111-40e1-9aec-1a6d647d8618): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:35:35.202188 kubelet[1970]: E1002 19:35:35.202158 1970 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-k28x6" podUID=c0558673-0111-40e1-9aec-1a6d647d8618 Oct 2 19:35:35.284646 kubelet[1970]: E1002 19:35:35.284618 1970 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-k28x6" podUID=c0558673-0111-40e1-9aec-1a6d647d8618 Oct 2 19:35:37.361000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:37.361000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000cfe2e0 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:35:37.361000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:37.362000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:37.362000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=13 a1=c000e0e040 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:35:37.362000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:37.364000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:37.364000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c000e0e180 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:35:37.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:37.366000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:37.366000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000e0e300 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:35:37.366000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:38.339022 systemd[1]: run-containerd-runc-k8s.io-fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87-runc.2XwNRl.mount: Deactivated successfully. Oct 2 19:35:38.785554 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.sbKCwI.mount: Deactivated successfully. Oct 2 19:35:42.283196 kubelet[1970]: I1002 19:35:42.283167 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:35:42.289260 systemd[1]: Created slice kubepods-besteffort-pod44ba6cdb_2867_4a39_abf9_4fb6f568bad3.slice. Oct 2 19:35:42.366049 kubelet[1970]: I1002 19:35:42.366005 1970 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:35:42.368494 kubelet[1970]: I1002 19:35:42.368470 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/44ba6cdb-2867-4a39-abf9-4fb6f568bad3-calico-apiserver-certs\") pod \"calico-apiserver-84cf5d5c84-rt56g\" (UID: \"44ba6cdb-2867-4a39-abf9-4fb6f568bad3\") " pod="calico-apiserver/calico-apiserver-84cf5d5c84-rt56g" Oct 2 19:35:42.368635 kubelet[1970]: I1002 19:35:42.368555 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-drllt\" (UniqueName: \"kubernetes.io/projected/44ba6cdb-2867-4a39-abf9-4fb6f568bad3-kube-api-access-drllt\") pod \"calico-apiserver-84cf5d5c84-rt56g\" (UID: \"44ba6cdb-2867-4a39-abf9-4fb6f568bad3\") " pod="calico-apiserver/calico-apiserver-84cf5d5c84-rt56g" Oct 2 19:35:42.371538 systemd[1]: Created slice kubepods-besteffort-pod8549e9aa_b39c_4d30_a740_5d8248c7335e.slice. Oct 2 19:35:42.408000 audit[3694]: NETFILTER_CFG table=filter:119 family=2 entries=7 op=nft_register_rule pid=3694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:42.410324 kernel: kauditd_printk_skb: 77 callbacks suppressed Oct 2 19:35:42.410386 kernel: audit: type=1325 audit(1696275342.408:1305): table=filter:119 family=2 entries=7 op=nft_register_rule pid=3694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:42.408000 audit[3694]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7fff03f610b0 a2=0 a3=7fff03f6109c items=0 ppid=2176 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.418733 kernel: audit: type=1300 audit(1696275342.408:1305): arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7fff03f610b0 a2=0 a3=7fff03f6109c items=0 ppid=2176 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.408000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:42.422001 kernel: audit: type=1327 audit(1696275342.408:1305): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:42.410000 audit[3694]: NETFILTER_CFG table=nat:120 family=2 entries=78 op=nft_register_rule pid=3694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:42.426588 kernel: audit: type=1325 audit(1696275342.410:1306): table=nat:120 family=2 entries=78 op=nft_register_rule pid=3694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:42.410000 audit[3694]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7fff03f610b0 a2=0 a3=7fff03f6109c items=0 ppid=2176 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.433636 kernel: audit: type=1300 audit(1696275342.410:1306): arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7fff03f610b0 a2=0 a3=7fff03f6109c items=0 ppid=2176 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.410000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:42.437616 kernel: audit: type=1327 audit(1696275342.410:1306): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:42.469116 kubelet[1970]: I1002 19:35:42.469085 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/8549e9aa-b39c-4d30-a740-5d8248c7335e-calico-apiserver-certs\") pod \"calico-apiserver-84cf5d5c84-24fz7\" (UID: \"8549e9aa-b39c-4d30-a740-5d8248c7335e\") " pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" Oct 2 19:35:42.469269 kubelet[1970]: I1002 19:35:42.469162 1970 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nc2fv\" (UniqueName: \"kubernetes.io/projected/8549e9aa-b39c-4d30-a740-5d8248c7335e-kube-api-access-nc2fv\") pod \"calico-apiserver-84cf5d5c84-24fz7\" (UID: \"8549e9aa-b39c-4d30-a740-5d8248c7335e\") " pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" Oct 2 19:35:42.472436 kubelet[1970]: E1002 19:35:42.472407 1970 secret.go:192] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Oct 2 19:35:42.474051 kubelet[1970]: E1002 19:35:42.474035 1970 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/44ba6cdb-2867-4a39-abf9-4fb6f568bad3-calico-apiserver-certs podName:44ba6cdb-2867-4a39-abf9-4fb6f568bad3 nodeName:}" failed. No retries permitted until 2023-10-02 19:35:42.972705668 +0000 UTC m=+66.144930179 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/44ba6cdb-2867-4a39-abf9-4fb6f568bad3-calico-apiserver-certs") pod "calico-apiserver-84cf5d5c84-rt56g" (UID: "44ba6cdb-2867-4a39-abf9-4fb6f568bad3") : secret "calico-apiserver-certs" not found Oct 2 19:35:42.544000 audit[3721]: NETFILTER_CFG table=filter:121 family=2 entries=8 op=nft_register_rule pid=3721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:42.544000 audit[3721]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffdc33a32a0 a2=0 a3=7ffdc33a328c items=0 ppid=2176 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.554881 kernel: audit: type=1325 audit(1696275342.544:1307): table=filter:121 family=2 entries=8 op=nft_register_rule pid=3721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:42.555019 kernel: audit: type=1300 audit(1696275342.544:1307): arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffdc33a32a0 a2=0 a3=7ffdc33a328c items=0 ppid=2176 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.544000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:42.550000 audit[3721]: NETFILTER_CFG table=nat:122 family=2 entries=78 op=nft_register_rule pid=3721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:42.563123 kernel: audit: type=1327 audit(1696275342.544:1307): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:42.563211 kernel: audit: type=1325 audit(1696275342.550:1308): table=nat:122 family=2 entries=78 op=nft_register_rule pid=3721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:42.550000 audit[3721]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffdc33a32a0 a2=0 a3=7ffdc33a328c items=0 ppid=2176 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.550000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:42.674931 env[1047]: time="2023-10-02T19:35:42.674810633Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84cf5d5c84-24fz7,Uid:8549e9aa-b39c-4d30-a740-5d8248c7335e,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:35:42.836867 systemd-networkd[967]: calie7486f03f2b: Link UP Oct 2 19:35:42.840737 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie7486f03f2b: link becomes ready Oct 2 19:35:42.840644 systemd-networkd[967]: calie7486f03f2b: Gained carrier Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.744 [INFO][3724] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0 calico-apiserver-84cf5d5c84- calico-apiserver 8549e9aa-b39c-4d30-a740-5d8248c7335e 804 0 2023-10-02 19:35:42 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:84cf5d5c84 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-0-f-8986abdbb8.novalocal calico-apiserver-84cf5d5c84-24fz7 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie7486f03f2b [] []}} ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-24fz7" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.749 [INFO][3724] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-24fz7" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.788 [INFO][3735] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" HandleID="k8s-pod-network.da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.798 [INFO][3735] ipam_plugin.go 269: Auto assigning IP ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" HandleID="k8s-pod-network.da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004df50), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-0-f-8986abdbb8.novalocal", "pod":"calico-apiserver-84cf5d5c84-24fz7", "timestamp":"2023-10-02 19:35:42.788386893 +0000 UTC"}, Hostname:"ci-3510-3-0-f-8986abdbb8.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:35:42.867306 env[1047]: time="2023-10-02T19:35:42Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:35:42.867306 env[1047]: time="2023-10-02T19:35:42Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.798 [INFO][3735] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-f-8986abdbb8.novalocal' Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.800 [INFO][3735] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.804 [INFO][3735] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.808 [INFO][3735] ipam.go 489: Trying affinity for 192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.810 [INFO][3735] ipam.go 155: Attempting to load block cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.813 [INFO][3735] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.813 [INFO][3735] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.90.192/26 handle="k8s-pod-network.da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.814 [INFO][3735] ipam.go 1682: Creating new handle: k8s-pod-network.da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.818 [INFO][3735] ipam.go 1203: Writing block in order to claim IPs block=192.168.90.192/26 handle="k8s-pod-network.da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.823 [INFO][3735] ipam.go 1216: Successfully claimed IPs: [192.168.90.197/26] block=192.168.90.192/26 handle="k8s-pod-network.da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.823 [INFO][3735] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.90.197/26] handle="k8s-pod-network.da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:42.867306 env[1047]: time="2023-10-02T19:35:42Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:35:42.867306 env[1047]: 2023-10-02 19:35:42.824 [INFO][3735] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.90.197/26] IPv6=[] ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" HandleID="k8s-pod-network.da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" Oct 2 19:35:42.867983 env[1047]: 2023-10-02 19:35:42.825 [INFO][3724] k8s.go 383: Populated endpoint ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-24fz7" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0", GenerateName:"calico-apiserver-84cf5d5c84-", Namespace:"calico-apiserver", SelfLink:"", UID:"8549e9aa-b39c-4d30-a740-5d8248c7335e", ResourceVersion:"804", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 35, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84cf5d5c84", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"", Pod:"calico-apiserver-84cf5d5c84-24fz7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.90.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie7486f03f2b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:42.867983 env[1047]: 2023-10-02 19:35:42.826 [INFO][3724] k8s.go 384: Calico CNI using IPs: [192.168.90.197/32] ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-24fz7" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" Oct 2 19:35:42.867983 env[1047]: 2023-10-02 19:35:42.826 [INFO][3724] dataplane_linux.go 68: Setting the host side veth name to calie7486f03f2b ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-24fz7" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" Oct 2 19:35:42.867983 env[1047]: 2023-10-02 19:35:42.827 [INFO][3724] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-24fz7" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" Oct 2 19:35:42.867983 env[1047]: 2023-10-02 19:35:42.842 [INFO][3724] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-24fz7" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0", GenerateName:"calico-apiserver-84cf5d5c84-", Namespace:"calico-apiserver", SelfLink:"", UID:"8549e9aa-b39c-4d30-a740-5d8248c7335e", ResourceVersion:"804", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 35, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84cf5d5c84", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed", Pod:"calico-apiserver-84cf5d5c84-24fz7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.90.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie7486f03f2b", MAC:"ee:1e:41:3e:44:02", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:42.867983 env[1047]: 2023-10-02 19:35:42.860 [INFO][3724] k8s.go 489: Wrote updated endpoint to datastore ContainerID="da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-24fz7" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--24fz7-eth0" Oct 2 19:35:42.886497 env[1047]: time="2023-10-02T19:35:42.885730046Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:35:42.886497 env[1047]: time="2023-10-02T19:35:42.885790539Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:35:42.886497 env[1047]: time="2023-10-02T19:35:42.885804667Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:35:42.886721 env[1047]: time="2023-10-02T19:35:42.886600637Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed pid=3764 runtime=io.containerd.runc.v2 Oct 2 19:35:42.905035 systemd[1]: Started cri-containerd-da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed.scope. Oct 2 19:35:42.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.927000 audit: BPF prog-id=180 op=LOAD Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3764 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461373139326464306333373637623039626531623536383833613635 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3764 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461373139326464306333373637623039626531623536383833613635 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit: BPF prog-id=181 op=LOAD Oct 2 19:35:42.929000 audit[3776]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000300350 items=0 ppid=3764 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461373139326464306333373637623039626531623536383833613635 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit: BPF prog-id=182 op=LOAD Oct 2 19:35:42.929000 audit[3776]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000300398 items=0 ppid=3764 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461373139326464306333373637623039626531623536383833613635 Oct 2 19:35:42.929000 audit: BPF prog-id=182 op=UNLOAD Oct 2 19:35:42.929000 audit: BPF prog-id=181 op=UNLOAD Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:42.929000 audit: BPF prog-id=183 op=LOAD Oct 2 19:35:42.929000 audit[3776]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003007a8 items=0 ppid=3764 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461373139326464306333373637623039626531623536383833613635 Oct 2 19:35:42.937000 audit[3795]: NETFILTER_CFG table=filter:123 family=2 entries=55 op=nft_register_chain pid=3795 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:35:42.937000 audit[3795]: SYSCALL arch=c000003e syscall=46 success=yes exit=28088 a0=3 a1=7ffd4474dc70 a2=0 a3=7ffd4474dc5c items=0 ppid=2917 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.937000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:35:42.967833 env[1047]: time="2023-10-02T19:35:42.967763751Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84cf5d5c84-24fz7,Uid:8549e9aa-b39c-4d30-a740-5d8248c7335e,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"da7192dd0c3767b09be1b56883a6582e28696386c9756e70f23dead61bba27ed\"" Oct 2 19:35:42.970344 env[1047]: time="2023-10-02T19:35:42.970321400Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:35:43.194001 env[1047]: time="2023-10-02T19:35:43.193920734Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84cf5d5c84-rt56g,Uid:44ba6cdb-2867-4a39-abf9-4fb6f568bad3,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:35:43.218118 env[1047]: time="2023-10-02T19:35:43.218017606Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:35:43.221850 env[1047]: time="2023-10-02T19:35:43.221757642Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:35:43.223157 kubelet[1970]: E1002 19:35:43.222647 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:35:43.223157 kubelet[1970]: E1002 19:35:43.222803 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:35:43.226900 kubelet[1970]: E1002 19:35:43.223840 1970 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nc2fv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-84cf5d5c84-24fz7_calico-apiserver(8549e9aa-b39c-4d30-a740-5d8248c7335e): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:35:43.226900 kubelet[1970]: E1002 19:35:43.224025 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" podUID=8549e9aa-b39c-4d30-a740-5d8248c7335e Oct 2 19:35:43.315985 kubelet[1970]: E1002 19:35:43.314243 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" podUID=8549e9aa-b39c-4d30-a740-5d8248c7335e Oct 2 19:35:43.408684 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali473ddbf3de8: link becomes ready Oct 2 19:35:43.413728 systemd-networkd[967]: cali473ddbf3de8: Link UP Oct 2 19:35:43.413738 systemd-networkd[967]: cali473ddbf3de8: Gained carrier Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.297 [INFO][3803] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0 calico-apiserver-84cf5d5c84- calico-apiserver 44ba6cdb-2867-4a39-abf9-4fb6f568bad3 795 0 2023-10-02 19:35:42 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:84cf5d5c84 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-0-f-8986abdbb8.novalocal calico-apiserver-84cf5d5c84-rt56g eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali473ddbf3de8 [] []}} ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-rt56g" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.298 [INFO][3803] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-rt56g" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.358 [INFO][3814] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" HandleID="k8s-pod-network.d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.370 [INFO][3814] ipam_plugin.go 269: Auto assigning IP ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" HandleID="k8s-pod-network.d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000515570), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-0-f-8986abdbb8.novalocal", "pod":"calico-apiserver-84cf5d5c84-rt56g", "timestamp":"2023-10-02 19:35:43.358863948 +0000 UTC"}, Hostname:"ci-3510-3-0-f-8986abdbb8.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:35:43.433335 env[1047]: time="2023-10-02T19:35:43Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:35:43.433335 env[1047]: time="2023-10-02T19:35:43Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.370 [INFO][3814] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-f-8986abdbb8.novalocal' Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.373 [INFO][3814] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.378 [INFO][3814] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.383 [INFO][3814] ipam.go 489: Trying affinity for 192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.385 [INFO][3814] ipam.go 155: Attempting to load block cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.389 [INFO][3814] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.90.192/26 host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.389 [INFO][3814] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.90.192/26 handle="k8s-pod-network.d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.391 [INFO][3814] ipam.go 1682: Creating new handle: k8s-pod-network.d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4 Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.396 [INFO][3814] ipam.go 1203: Writing block in order to claim IPs block=192.168.90.192/26 handle="k8s-pod-network.d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.403 [INFO][3814] ipam.go 1216: Successfully claimed IPs: [192.168.90.198/26] block=192.168.90.192/26 handle="k8s-pod-network.d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.403 [INFO][3814] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.90.198/26] handle="k8s-pod-network.d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" host="ci-3510-3-0-f-8986abdbb8.novalocal" Oct 2 19:35:43.433335 env[1047]: time="2023-10-02T19:35:43Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:35:43.433335 env[1047]: 2023-10-02 19:35:43.404 [INFO][3814] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.90.198/26] IPv6=[] ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" HandleID="k8s-pod-network.d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Workload="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" Oct 2 19:35:43.434030 env[1047]: 2023-10-02 19:35:43.405 [INFO][3803] k8s.go 383: Populated endpoint ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-rt56g" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0", GenerateName:"calico-apiserver-84cf5d5c84-", Namespace:"calico-apiserver", SelfLink:"", UID:"44ba6cdb-2867-4a39-abf9-4fb6f568bad3", ResourceVersion:"795", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 35, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84cf5d5c84", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"", Pod:"calico-apiserver-84cf5d5c84-rt56g", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.90.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali473ddbf3de8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:43.434030 env[1047]: 2023-10-02 19:35:43.405 [INFO][3803] k8s.go 384: Calico CNI using IPs: [192.168.90.198/32] ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-rt56g" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" Oct 2 19:35:43.434030 env[1047]: 2023-10-02 19:35:43.406 [INFO][3803] dataplane_linux.go 68: Setting the host side veth name to cali473ddbf3de8 ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-rt56g" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" Oct 2 19:35:43.434030 env[1047]: 2023-10-02 19:35:43.408 [INFO][3803] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-rt56g" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" Oct 2 19:35:43.434030 env[1047]: 2023-10-02 19:35:43.423 [INFO][3803] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-rt56g" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0", GenerateName:"calico-apiserver-84cf5d5c84-", Namespace:"calico-apiserver", SelfLink:"", UID:"44ba6cdb-2867-4a39-abf9-4fb6f568bad3", ResourceVersion:"795", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 35, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84cf5d5c84", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-f-8986abdbb8.novalocal", ContainerID:"d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4", Pod:"calico-apiserver-84cf5d5c84-rt56g", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.90.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali473ddbf3de8", MAC:"aa:9f:74:eb:b0:11", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:35:43.434030 env[1047]: 2023-10-02 19:35:43.430 [INFO][3803] k8s.go 489: Wrote updated endpoint to datastore ContainerID="d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4" Namespace="calico-apiserver" Pod="calico-apiserver-84cf5d5c84-rt56g" WorkloadEndpoint="ci--3510--3--0--f--8986abdbb8.novalocal-k8s-calico--apiserver--84cf5d5c84--rt56g-eth0" Oct 2 19:35:43.442000 audit[3847]: NETFILTER_CFG table=filter:124 family=2 entries=8 op=nft_register_rule pid=3847 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:43.442000 audit[3847]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffcb784c490 a2=0 a3=7ffcb784c47c items=0 ppid=2176 pid=3847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:43.442000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:43.450000 audit[3847]: NETFILTER_CFG table=nat:125 family=2 entries=78 op=nft_register_rule pid=3847 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:43.450000 audit[3847]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffcb784c490 a2=0 a3=7ffcb784c47c items=0 ppid=2176 pid=3847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:43.450000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:43.455872 env[1047]: time="2023-10-02T19:35:43.455768978Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:35:43.455872 env[1047]: time="2023-10-02T19:35:43.455830555Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:35:43.456047 env[1047]: time="2023-10-02T19:35:43.455852696Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:35:43.456248 env[1047]: time="2023-10-02T19:35:43.456210551Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4 pid=3866 runtime=io.containerd.runc.v2 Oct 2 19:35:43.472000 audit[3886]: NETFILTER_CFG table=filter:126 family=2 entries=38 op=nft_register_chain pid=3886 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:35:43.472000 audit[3886]: SYSCALL arch=c000003e syscall=46 success=yes exit=20952 a0=3 a1=7fff31eaa790 a2=0 a3=7fff31eaa77c items=0 ppid=2917 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:43.472000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:35:43.471341 systemd[1]: Started cri-containerd-d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4.scope. Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.490000 audit: BPF prog-id=184 op=LOAD Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3866 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:43.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653731323363623837396232343363323236613037643163633266 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3866 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:43.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653731323363623837396232343363323236613037643163633266 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.491000 audit: BPF prog-id=185 op=LOAD Oct 2 19:35:43.491000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d6080 items=0 ppid=3866 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:43.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653731323363623837396232343363323236613037643163633266 Oct 2 19:35:43.500000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.500000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.500000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.500000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.500000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.500000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.500000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.500000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.500000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.500000 audit: BPF prog-id=186 op=LOAD Oct 2 19:35:43.500000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d60c8 items=0 ppid=3866 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:43.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653731323363623837396232343363323236613037643163633266 Oct 2 19:35:43.501000 audit: BPF prog-id=186 op=UNLOAD Oct 2 19:35:43.501000 audit: BPF prog-id=185 op=UNLOAD Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:43.501000 audit: BPF prog-id=187 op=LOAD Oct 2 19:35:43.501000 audit[3875]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d64d8 items=0 ppid=3866 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:43.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653731323363623837396232343363323236613037643163633266 Oct 2 19:35:43.539728 env[1047]: time="2023-10-02T19:35:43.539652966Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84cf5d5c84-rt56g,Uid:44ba6cdb-2867-4a39-abf9-4fb6f568bad3,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"d9e7123cb879b243c226a07d1cc2f215c51f32adb7db96e6c48287c669f2bdf4\"" Oct 2 19:35:43.542344 env[1047]: time="2023-10-02T19:35:43.542318719Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:35:43.787270 env[1047]: time="2023-10-02T19:35:43.787041787Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:35:43.791373 env[1047]: time="2023-10-02T19:35:43.791280193Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:35:43.792170 kubelet[1970]: E1002 19:35:43.792078 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:35:43.792492 kubelet[1970]: E1002 19:35:43.792396 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:35:43.795350 kubelet[1970]: E1002 19:35:43.795315 1970 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-drllt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-84cf5d5c84-rt56g_calico-apiserver(44ba6cdb-2867-4a39-abf9-4fb6f568bad3): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:35:43.795874 kubelet[1970]: E1002 19:35:43.795848 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-rt56g" podUID=44ba6cdb-2867-4a39-abf9-4fb6f568bad3 Oct 2 19:35:44.196708 systemd-networkd[967]: calie7486f03f2b: Gained IPv6LL Oct 2 19:35:44.321775 kubelet[1970]: E1002 19:35:44.321004 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" podUID=8549e9aa-b39c-4d30-a740-5d8248c7335e Oct 2 19:35:44.321775 kubelet[1970]: E1002 19:35:44.321702 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-rt56g" podUID=44ba6cdb-2867-4a39-abf9-4fb6f568bad3 Oct 2 19:35:44.456000 audit[3928]: NETFILTER_CFG table=filter:127 family=2 entries=8 op=nft_register_rule pid=3928 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:44.456000 audit[3928]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7fff570559a0 a2=0 a3=7fff5705598c items=0 ppid=2176 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:44.456000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:44.459000 audit[3928]: NETFILTER_CFG table=nat:128 family=2 entries=78 op=nft_register_rule pid=3928 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:35:44.459000 audit[3928]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7fff570559a0 a2=0 a3=7fff5705598c items=0 ppid=2176 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:44.459000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:35:44.963858 systemd-networkd[967]: cali473ddbf3de8: Gained IPv6LL Oct 2 19:35:45.322431 kubelet[1970]: E1002 19:35:45.322290 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-rt56g" podUID=44ba6cdb-2867-4a39-abf9-4fb6f568bad3 Oct 2 19:35:45.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.203:22-172.24.4.1:53680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:45.631035 systemd[1]: Started sshd@7-172.24.4.203:22-172.24.4.1:53680.service. Oct 2 19:35:46.897000 audit[3938]: USER_ACCT pid=3938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:46.898000 audit[3938]: CRED_ACQ pid=3938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:46.898845 sshd[3938]: Accepted publickey for core from 172.24.4.1 port 53680 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:35:46.898000 audit[3938]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2112d8c0 a2=3 a3=0 items=0 ppid=1 pid=3938 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:46.898000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:46.903312 sshd[3938]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:46.909315 systemd-logind[1041]: New session 8 of user core. Oct 2 19:35:46.909727 systemd[1]: Started session-8.scope. Oct 2 19:35:46.915000 audit[3938]: USER_START pid=3938 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:46.916000 audit[3946]: CRED_ACQ pid=3946 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:47.653652 sshd[3938]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:47.658711 kernel: kauditd_printk_skb: 142 callbacks suppressed Oct 2 19:35:47.658845 kernel: audit: type=1106 audit(1696275347.655:1357): pid=3938 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:47.655000 audit[3938]: USER_END pid=3938 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:47.660518 systemd[1]: sshd@7-172.24.4.203:22-172.24.4.1:53680.service: Deactivated successfully. Oct 2 19:35:47.662246 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:35:47.655000 audit[3938]: CRED_DISP pid=3938 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:47.678528 systemd-logind[1041]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:35:47.679004 kernel: audit: type=1104 audit(1696275347.655:1358): pid=3938 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:47.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.203:22-172.24.4.1:53680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:47.688679 kernel: audit: type=1131 audit(1696275347.658:1359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.203:22-172.24.4.1:53680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:47.689093 systemd-logind[1041]: Removed session 8. Oct 2 19:35:48.331399 systemd[1]: run-containerd-runc-k8s.io-fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87-runc.o5Ipfy.mount: Deactivated successfully. Oct 2 19:35:48.810178 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.mNY9Hi.mount: Deactivated successfully. Oct 2 19:35:49.316991 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.FeGFsO.mount: Deactivated successfully. Oct 2 19:35:51.049327 env[1047]: time="2023-10-02T19:35:51.049230984Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:35:51.303732 env[1047]: time="2023-10-02T19:35:51.303443022Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:35:51.305451 env[1047]: time="2023-10-02T19:35:51.305361434Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:35:51.305952 kubelet[1970]: E1002 19:35:51.305901 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:35:51.306646 kubelet[1970]: E1002 19:35:51.305990 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:35:51.306646 kubelet[1970]: E1002 19:35:51.306165 1970 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-2sw5b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-k28x6_calico-system(c0558673-0111-40e1-9aec-1a6d647d8618): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:35:51.308250 env[1047]: time="2023-10-02T19:35:51.308170434Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:35:51.565093 env[1047]: time="2023-10-02T19:35:51.564835871Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:35:51.566956 env[1047]: time="2023-10-02T19:35:51.566867927Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:35:51.567546 kubelet[1970]: E1002 19:35:51.567490 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:35:51.567754 kubelet[1970]: E1002 19:35:51.567687 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:35:51.568010 kubelet[1970]: E1002 19:35:51.567976 1970 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-2sw5b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-k28x6_calico-system(c0558673-0111-40e1-9aec-1a6d647d8618): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:35:51.568264 kubelet[1970]: E1002 19:35:51.568193 1970 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-k28x6" podUID=c0558673-0111-40e1-9aec-1a6d647d8618 Oct 2 19:35:56.049833 env[1047]: time="2023-10-02T19:35:56.049280326Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:35:56.476896 env[1047]: time="2023-10-02T19:35:56.476738857Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:35:56.478769 env[1047]: time="2023-10-02T19:35:56.478655425Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:35:56.479307 kubelet[1970]: E1002 19:35:56.479254 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:35:56.479932 kubelet[1970]: E1002 19:35:56.479332 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:35:56.479932 kubelet[1970]: E1002 19:35:56.479515 1970 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nc2fv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-84cf5d5c84-24fz7_calico-apiserver(8549e9aa-b39c-4d30-a740-5d8248c7335e): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:35:56.479932 kubelet[1970]: E1002 19:35:56.479632 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" podUID=8549e9aa-b39c-4d30-a740-5d8248c7335e Oct 2 19:35:57.050628 env[1047]: time="2023-10-02T19:35:57.050363999Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:35:57.316000 env[1047]: time="2023-10-02T19:35:57.315758330Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:35:57.318056 env[1047]: time="2023-10-02T19:35:57.317927784Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:35:57.318505 kubelet[1970]: E1002 19:35:57.318432 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:35:57.318655 kubelet[1970]: E1002 19:35:57.318514 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:35:57.319463 kubelet[1970]: E1002 19:35:57.319357 1970 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-drllt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-84cf5d5c84-rt56g_calico-apiserver(44ba6cdb-2867-4a39-abf9-4fb6f568bad3): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:35:57.319825 kubelet[1970]: E1002 19:35:57.319790 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-rt56g" podUID=44ba6cdb-2867-4a39-abf9-4fb6f568bad3 Oct 2 19:35:57.667468 systemd[1]: Started sshd@8-172.24.4.203:22-172.24.4.1:52770.service. Oct 2 19:35:57.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.203:22-172.24.4.1:52770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:57.677640 kernel: audit: type=1130 audit(1696275357.667:1360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.203:22-172.24.4.1:52770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:58.780427 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.jh5tF4.mount: Deactivated successfully. Oct 2 19:35:58.786000 audit[4030]: USER_ACCT pid=4030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:58.791000 audit[4030]: CRED_ACQ pid=4030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:58.793655 sshd[4030]: Accepted publickey for core from 172.24.4.1 port 52770 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:35:58.797059 kernel: audit: type=1101 audit(1696275358.786:1361): pid=4030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:58.797127 kernel: audit: type=1103 audit(1696275358.791:1362): pid=4030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:58.797311 sshd[4030]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:58.791000 audit[4030]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe02ed4260 a2=3 a3=0 items=0 ppid=1 pid=4030 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:58.807766 kernel: audit: type=1006 audit(1696275358.791:1363): pid=4030 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:35:58.807839 kernel: audit: type=1300 audit(1696275358.791:1363): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe02ed4260 a2=3 a3=0 items=0 ppid=1 pid=4030 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:58.807326 systemd[1]: Started session-9.scope. Oct 2 19:35:58.808198 systemd-logind[1041]: New session 9 of user core. Oct 2 19:35:58.791000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:58.817611 kernel: audit: type=1327 audit(1696275358.791:1363): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:58.825000 audit[4030]: USER_START pid=4030 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:58.833658 kernel: audit: type=1105 audit(1696275358.825:1364): pid=4030 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:58.834000 audit[4070]: CRED_ACQ pid=4070 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:58.843760 kernel: audit: type=1103 audit(1696275358.834:1365): pid=4070 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:59.603001 sshd[4030]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:59.606000 audit[4030]: USER_END pid=4030 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:59.610350 systemd[1]: sshd@8-172.24.4.203:22-172.24.4.1:52770.service: Deactivated successfully. Oct 2 19:35:59.611417 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:35:59.623623 kernel: audit: type=1106 audit(1696275359.606:1366): pid=4030 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:59.625296 systemd-logind[1041]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:35:59.606000 audit[4030]: CRED_DISP pid=4030 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:59.634617 kernel: audit: type=1104 audit(1696275359.606:1367): pid=4030 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:35:59.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.203:22-172.24.4.1:52770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:59.635377 systemd-logind[1041]: Removed session 9. Oct 2 19:36:05.052432 kubelet[1970]: E1002 19:36:05.050164 1970 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-k28x6" podUID=c0558673-0111-40e1-9aec-1a6d647d8618 Oct 2 19:36:08.847862 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.3hU3Bg.mount: Deactivated successfully. Oct 2 19:36:09.613706 systemd[1]: Started sshd@9-172.24.4.203:22-172.24.4.1:60942.service. Oct 2 19:36:09.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.203:22-172.24.4.1:60942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:09.617326 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:36:09.617459 kernel: audit: type=1130 audit(1696275369.614:1369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.203:22-172.24.4.1:60942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:10.047499 kubelet[1970]: E1002 19:36:10.047458 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" podUID=8549e9aa-b39c-4d30-a740-5d8248c7335e Oct 2 19:36:11.042000 audit[4182]: USER_ACCT pid=4182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.045039 sshd[4182]: Accepted publickey for core from 172.24.4.1 port 60942 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:36:11.054611 kernel: audit: type=1101 audit(1696275371.042:1370): pid=4182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.057030 sshd[4182]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:11.053000 audit[4182]: CRED_ACQ pid=4182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.067792 kernel: audit: type=1103 audit(1696275371.053:1371): pid=4182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.069133 kernel: audit: type=1006 audit(1696275371.053:1372): pid=4182 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:36:11.072293 systemd[1]: Started session-10.scope. Oct 2 19:36:11.075216 systemd-logind[1041]: New session 10 of user core. Oct 2 19:36:11.053000 audit[4182]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe32b5dc60 a2=3 a3=0 items=0 ppid=1 pid=4182 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:11.053000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:11.086725 kernel: audit: type=1300 audit(1696275371.053:1372): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe32b5dc60 a2=3 a3=0 items=0 ppid=1 pid=4182 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:11.086850 kernel: audit: type=1327 audit(1696275371.053:1372): proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:11.090000 audit[4182]: USER_START pid=4182 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.096000 audit[4184]: CRED_ACQ pid=4184 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.101809 kernel: audit: type=1105 audit(1696275371.090:1373): pid=4182 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.101918 kernel: audit: type=1103 audit(1696275371.096:1374): pid=4184 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.872848 sshd[4182]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:11.874000 audit[4182]: USER_END pid=4182 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.878880 systemd[1]: sshd@9-172.24.4.203:22-172.24.4.1:60942.service: Deactivated successfully. Oct 2 19:36:11.880399 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:36:11.888731 kernel: audit: type=1106 audit(1696275371.874:1375): pid=4182 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.874000 audit[4182]: CRED_DISP pid=4182 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.899233 systemd-logind[1041]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:36:11.899630 kernel: audit: type=1104 audit(1696275371.874:1376): pid=4182 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:11.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.203:22-172.24.4.1:60942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:11.901525 systemd-logind[1041]: Removed session 10. Oct 2 19:36:12.048836 kubelet[1970]: E1002 19:36:12.048790 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-rt56g" podUID=44ba6cdb-2867-4a39-abf9-4fb6f568bad3 Oct 2 19:36:18.048713 env[1047]: time="2023-10-02T19:36:18.048636439Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:36:18.333073 systemd[1]: run-containerd-runc-k8s.io-fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87-runc.3JVNew.mount: Deactivated successfully. Oct 2 19:36:18.374284 env[1047]: time="2023-10-02T19:36:18.374194933Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:36:18.376081 env[1047]: time="2023-10-02T19:36:18.375983266Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:36:18.376676 kubelet[1970]: E1002 19:36:18.376627 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:36:18.377020 kubelet[1970]: E1002 19:36:18.376754 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:36:18.377095 kubelet[1970]: E1002 19:36:18.377062 1970 kuberuntime_manager.go:862] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-2sw5b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-k28x6_calico-system(c0558673-0111-40e1-9aec-1a6d647d8618): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:36:18.379881 env[1047]: time="2023-10-02T19:36:18.379823067Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:36:18.787723 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.N97Qhq.mount: Deactivated successfully. Oct 2 19:36:18.849228 env[1047]: time="2023-10-02T19:36:18.849160098Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:36:18.852338 env[1047]: time="2023-10-02T19:36:18.852278974Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:36:18.852758 kubelet[1970]: E1002 19:36:18.852710 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:36:18.852758 kubelet[1970]: E1002 19:36:18.852754 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:36:18.852970 kubelet[1970]: E1002 19:36:18.852867 1970 kuberuntime_manager.go:862] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-2sw5b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-k28x6_calico-system(c0558673-0111-40e1-9aec-1a6d647d8618): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:36:18.852970 kubelet[1970]: E1002 19:36:18.852933 1970 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-k28x6" podUID=c0558673-0111-40e1-9aec-1a6d647d8618 Oct 2 19:36:19.317984 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.TOygjD.mount: Deactivated successfully. Oct 2 19:36:21.887826 systemd[1]: Started sshd@10-172.24.4.203:22-172.24.4.1:57624.service. Oct 2 19:36:21.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.203:22-172.24.4.1:57624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:21.891470 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:36:21.891730 kernel: audit: type=1130 audit(1696275381.887:1378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.203:22-172.24.4.1:57624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:23.048090 env[1047]: time="2023-10-02T19:36:23.047987012Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:36:23.129000 audit[4267]: USER_ACCT pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.132760 sshd[4267]: Accepted publickey for core from 172.24.4.1 port 57624 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:36:23.141633 kernel: audit: type=1101 audit(1696275383.129:1379): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.140000 audit[4267]: CRED_ACQ pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.153709 kernel: audit: type=1103 audit(1696275383.140:1380): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.154123 sshd[4267]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:23.165200 kernel: audit: type=1006 audit(1696275383.140:1381): pid=4267 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:36:23.165322 kernel: audit: type=1300 audit(1696275383.140:1381): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0db5f550 a2=3 a3=0 items=0 ppid=1 pid=4267 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:23.140000 audit[4267]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0db5f550 a2=3 a3=0 items=0 ppid=1 pid=4267 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:23.175424 kernel: audit: type=1327 audit(1696275383.140:1381): proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:23.140000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:23.182710 systemd-logind[1041]: New session 11 of user core. Oct 2 19:36:23.185076 systemd[1]: Started session-11.scope. Oct 2 19:36:23.198000 audit[4267]: USER_START pid=4267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.213464 kernel: audit: type=1105 audit(1696275383.198:1382): pid=4267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.213696 kernel: audit: type=1103 audit(1696275383.211:1383): pid=4272 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.211000 audit[4272]: CRED_ACQ pid=4272 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.313369 env[1047]: time="2023-10-02T19:36:23.313153851Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:36:23.350755 env[1047]: time="2023-10-02T19:36:23.350644090Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:36:23.351184 kubelet[1970]: E1002 19:36:23.351138 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:36:23.351772 kubelet[1970]: E1002 19:36:23.351219 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:36:23.351772 kubelet[1970]: E1002 19:36:23.351417 1970 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nc2fv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-84cf5d5c84-24fz7_calico-apiserver(8549e9aa-b39c-4d30-a740-5d8248c7335e): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:36:23.351772 kubelet[1970]: E1002 19:36:23.351509 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" podUID=8549e9aa-b39c-4d30-a740-5d8248c7335e Oct 2 19:36:23.810470 sshd[4267]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:23.811000 audit[4267]: USER_END pid=4267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.825639 kernel: audit: type=1106 audit(1696275383.811:1384): pid=4267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.818523 systemd[1]: sshd@10-172.24.4.203:22-172.24.4.1:57624.service: Deactivated successfully. Oct 2 19:36:23.819988 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:36:23.811000 audit[4267]: CRED_DISP pid=4267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.836616 kernel: audit: type=1104 audit(1696275383.811:1385): pid=4267 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:23.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.203:22-172.24.4.1:57624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:23.838841 systemd[1]: Started sshd@11-172.24.4.203:22-172.24.4.1:57626.service. Oct 2 19:36:23.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.203:22-172.24.4.1:57626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:23.842763 systemd-logind[1041]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:36:23.845053 systemd-logind[1041]: Removed session 11. Oct 2 19:36:24.048917 env[1047]: time="2023-10-02T19:36:24.048366397Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:36:24.296779 env[1047]: time="2023-10-02T19:36:24.296661188Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:36:24.299602 env[1047]: time="2023-10-02T19:36:24.299489357Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:36:24.300149 kubelet[1970]: E1002 19:36:24.300091 1970 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:36:24.300283 kubelet[1970]: E1002 19:36:24.300213 1970 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:36:24.301761 kubelet[1970]: E1002 19:36:24.301711 1970 kuberuntime_manager.go:862] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-drllt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-84cf5d5c84-rt56g_calico-apiserver(44ba6cdb-2867-4a39-abf9-4fb6f568bad3): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:36:24.302103 kubelet[1970]: E1002 19:36:24.301854 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-rt56g" podUID=44ba6cdb-2867-4a39-abf9-4fb6f568bad3 Oct 2 19:36:25.072000 audit[4282]: USER_ACCT pid=4282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:25.074952 sshd[4282]: Accepted publickey for core from 172.24.4.1 port 57626 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:36:25.075000 audit[4282]: CRED_ACQ pid=4282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:25.075000 audit[4282]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2d490ad0 a2=3 a3=0 items=0 ppid=1 pid=4282 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:25.075000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:25.078873 sshd[4282]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:25.092935 systemd-logind[1041]: New session 12 of user core. Oct 2 19:36:25.093847 systemd[1]: Started session-12.scope. Oct 2 19:36:25.106000 audit[4282]: USER_START pid=4282 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:25.110000 audit[4284]: CRED_ACQ pid=4284 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:27.582929 systemd[1]: Started sshd@12-172.24.4.203:22-172.24.4.1:60424.service. Oct 2 19:36:27.594192 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 19:36:27.594273 kernel: audit: type=1130 audit(1696275387.582:1393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.203:22-172.24.4.1:60424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:27.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.203:22-172.24.4.1:60424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:27.598104 sshd[4282]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:27.598000 audit[4282]: USER_END pid=4282 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:27.607594 kernel: audit: type=1106 audit(1696275387.598:1394): pid=4282 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:27.598000 audit[4282]: CRED_DISP pid=4282 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:27.613613 kernel: audit: type=1104 audit(1696275387.598:1395): pid=4282 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:27.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.203:22-172.24.4.1:57626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:27.629910 systemd[1]: sshd@11-172.24.4.203:22-172.24.4.1:57626.service: Deactivated successfully. Oct 2 19:36:27.630927 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:36:27.632391 systemd-logind[1041]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:36:27.634732 kernel: audit: type=1131 audit(1696275387.628:1396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.203:22-172.24.4.1:57626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:27.635049 systemd-logind[1041]: Removed session 12. Oct 2 19:36:28.806641 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.7Kb9ed.mount: Deactivated successfully. Oct 2 19:36:28.854184 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.87PcZP.mount: Deactivated successfully. Oct 2 19:36:28.932000 audit[4291]: USER_ACCT pid=4291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:28.935066 sshd[4291]: Accepted publickey for core from 172.24.4.1 port 60424 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:36:28.940679 kernel: audit: type=1101 audit(1696275388.932:1397): pid=4291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:28.938000 audit[4291]: CRED_ACQ pid=4291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:28.948687 kernel: audit: type=1103 audit(1696275388.938:1398): pid=4291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:28.948603 sshd[4291]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:28.954594 kernel: audit: type=1006 audit(1696275388.938:1399): pid=4291 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:36:28.938000 audit[4291]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb59f6b90 a2=3 a3=0 items=0 ppid=1 pid=4291 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:28.938000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:28.963548 kernel: audit: type=1300 audit(1696275388.938:1399): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb59f6b90 a2=3 a3=0 items=0 ppid=1 pid=4291 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:28.963657 kernel: audit: type=1327 audit(1696275388.938:1399): proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:28.966871 systemd-logind[1041]: New session 13 of user core. Oct 2 19:36:28.967377 systemd[1]: Started session-13.scope. Oct 2 19:36:28.975000 audit[4291]: USER_START pid=4291 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:28.984632 kernel: audit: type=1105 audit(1696275388.975:1400): pid=4291 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:28.983000 audit[4357]: CRED_ACQ pid=4357 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:29.777784 sshd[4291]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:29.780000 audit[4291]: USER_END pid=4291 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:29.780000 audit[4291]: CRED_DISP pid=4291 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:29.785891 systemd-logind[1041]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:36:29.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.203:22-172.24.4.1:60424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:29.788316 systemd[1]: sshd@12-172.24.4.203:22-172.24.4.1:60424.service: Deactivated successfully. Oct 2 19:36:29.790059 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:36:29.795776 systemd-logind[1041]: Removed session 13. Oct 2 19:36:30.503000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:30.503000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0024041e0 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:36:30.503000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:30.504000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:30.504000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c001b58a20 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:36:30.504000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:32.050891 kubelet[1970]: E1002 19:36:32.050813 1970 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-k28x6" podUID=c0558673-0111-40e1-9aec-1a6d647d8618 Oct 2 19:36:32.865000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:32.868118 kernel: kauditd_printk_skb: 10 callbacks suppressed Oct 2 19:36:32.868171 kernel: audit: type=1400 audit(1696275392.865:1407): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:32.865000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525615 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:32.887116 kernel: audit: type=1400 audit(1696275392.865:1408): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525615 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:32.865000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c008d6ec30 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:36:32.900119 kernel: audit: type=1300 audit(1696275392.865:1408): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c008d6ec30 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:36:32.865000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:36:32.911509 kernel: audit: type=1327 audit(1696275392.865:1408): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:36:32.865000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:32.865000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0021899a0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:36:32.928719 kernel: audit: type=1400 audit(1696275392.865:1409): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:32.928780 kernel: audit: type=1300 audit(1696275392.865:1409): arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0021899a0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:36:32.928811 kernel: audit: type=1327 audit(1696275392.865:1409): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:36:32.865000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:36:32.865000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00726b1d0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:36:32.938826 kernel: audit: type=1300 audit(1696275392.865:1407): arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00726b1d0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:36:32.938892 kernel: audit: type=1327 audit(1696275392.865:1407): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:36:32.865000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:36:32.943589 kernel: audit: type=1400 audit(1696275392.886:1410): avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525621 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:32.886000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525621 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:32.886000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c008d6ec90 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:36:32.886000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:36:33.047000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:33.047000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c002189b60 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:36:33.047000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:36:33.048000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525619 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:33.048000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00726b3e0 a2=fc6 a3=0 items=0 ppid=1673 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c609 key=(null) Oct 2 19:36:33.048000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:36:34.047803 kubelet[1970]: E1002 19:36:34.047760 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" podUID=8549e9aa-b39c-4d30-a740-5d8248c7335e Oct 2 19:36:37.053018 kubelet[1970]: E1002 19:36:37.052494 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-rt56g" podUID=44ba6cdb-2867-4a39-abf9-4fb6f568bad3 Oct 2 19:36:37.361000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:37.361000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00234f140 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:36:37.361000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:37.364000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:37.364000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00234f180 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:36:37.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:37.365000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:37.365000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c00234f1c0 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:36:37.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:37.365000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525348 scontext=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:37.365000 audit[1832]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=16 a1=c00234f200 a2=fc6 a3=0 items=0 ppid=1701 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c331,c419 key=(null) Oct 2 19:36:37.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:38.340110 systemd[1]: run-containerd-runc-k8s.io-fe7a1cd585dbb232b2d8be141ebd91c3567b2c90123544771d6c311dab569d87-runc.AOiTon.mount: Deactivated successfully. Oct 2 19:36:38.826945 systemd[1]: run-containerd-runc-k8s.io-66d790c53585543516a7e90fd21f8e0c7d04b64308687c95411b07318a234071-runc.OARucD.mount: Deactivated successfully. Oct 2 19:36:39.792636 systemd[1]: Started sshd@13-172.24.4.203:22-172.24.4.1:37824.service. Oct 2 19:36:39.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.203:22-172.24.4.1:37824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:39.796492 kernel: kauditd_printk_skb: 20 callbacks suppressed Oct 2 19:36:39.796645 kernel: audit: type=1130 audit(1696275399.792:1417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.203:22-172.24.4.1:37824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:40.971000 audit[4439]: USER_ACCT pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:40.973446 sshd[4439]: Accepted publickey for core from 172.24.4.1 port 37824 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:36:40.982000 audit[4439]: CRED_ACQ pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:40.984797 sshd[4439]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:40.993865 kernel: audit: type=1101 audit(1696275400.971:1418): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:40.993980 kernel: audit: type=1103 audit(1696275400.982:1419): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:41.000678 kernel: audit: type=1006 audit(1696275400.982:1420): pid=4439 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:36:41.003467 kernel: audit: type=1300 audit(1696275400.982:1420): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc99c8a560 a2=3 a3=0 items=0 ppid=1 pid=4439 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:40.982000 audit[4439]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc99c8a560 a2=3 a3=0 items=0 ppid=1 pid=4439 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:40.982000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:41.018666 kernel: audit: type=1327 audit(1696275400.982:1420): proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:41.019163 systemd[1]: Started session-14.scope. Oct 2 19:36:41.020221 systemd-logind[1041]: New session 14 of user core. Oct 2 19:36:41.032000 audit[4439]: USER_START pid=4439 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:41.046615 kernel: audit: type=1105 audit(1696275401.032:1421): pid=4439 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:41.035000 audit[4441]: CRED_ACQ pid=4441 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:41.056625 kernel: audit: type=1103 audit(1696275401.035:1422): pid=4441 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:41.937081 sshd[4439]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:41.937000 audit[4439]: USER_END pid=4439 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:41.952338 systemd[1]: sshd@13-172.24.4.203:22-172.24.4.1:37824.service: Deactivated successfully. Oct 2 19:36:41.952619 kernel: audit: type=1106 audit(1696275401.937:1423): pid=4439 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:41.937000 audit[4439]: CRED_DISP pid=4439 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:41.954216 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:36:41.963648 kernel: audit: type=1104 audit(1696275401.937:1424): pid=4439 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:36:41.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.203:22-172.24.4.1:37824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:41.964674 systemd-logind[1041]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:36:41.966715 systemd-logind[1041]: Removed session 14. Oct 2 19:36:45.048059 kubelet[1970]: E1002 19:36:45.047997 1970 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-84cf5d5c84-24fz7" podUID=8549e9aa-b39c-4d30-a740-5d8248c7335e Oct 2 19:36:46.049400 kubelet[1970]: E1002 19:36:46.049356 1970 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-k28x6" podUID=c0558673-0111-40e1-9aec-1a6d647d8618