Oct 2 19:16:16.023216 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:16:16.023263 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:16:16.023293 kernel: BIOS-provided physical RAM map: Oct 2 19:16:16.023311 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:16:16.023327 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:16:16.023344 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:16:16.023364 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable Oct 2 19:16:16.027422 kernel: BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved Oct 2 19:16:16.027456 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:16:16.027470 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:16:16.027483 kernel: NX (Execute Disable) protection: active Oct 2 19:16:16.027495 kernel: SMBIOS 2.8 present. Oct 2 19:16:16.027508 kernel: DMI: OpenStack Foundation OpenStack Nova, BIOS 1.15.0-1 04/01/2014 Oct 2 19:16:16.027521 kernel: Hypervisor detected: KVM Oct 2 19:16:16.027536 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:16:16.027553 kernel: kvm-clock: cpu 0, msr 13f8a001, primary cpu clock Oct 2 19:16:16.027567 kernel: kvm-clock: using sched offset of 6943370537 cycles Oct 2 19:16:16.027581 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:16:16.027595 kernel: tsc: Detected 1996.249 MHz processor Oct 2 19:16:16.027610 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:16:16.027624 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:16:16.027638 kernel: last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 Oct 2 19:16:16.027652 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:16:16.027669 kernel: ACPI: Early table checksum verification disabled Oct 2 19:16:16.027683 kernel: ACPI: RSDP 0x00000000000F5930 000014 (v00 BOCHS ) Oct 2 19:16:16.027696 kernel: ACPI: RSDT 0x000000007FFE1848 000030 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:16:16.027711 kernel: ACPI: FACP 0x000000007FFE172C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:16:16.027722 kernel: ACPI: DSDT 0x000000007FFE0040 0016EC (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:16:16.027731 kernel: ACPI: FACS 0x000000007FFE0000 000040 Oct 2 19:16:16.027741 kernel: ACPI: APIC 0x000000007FFE17A0 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:16:16.027750 kernel: ACPI: WAET 0x000000007FFE1820 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:16:16.027759 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe172c-0x7ffe179f] Oct 2 19:16:16.027771 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe172b] Oct 2 19:16:16.027779 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Oct 2 19:16:16.027786 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17a0-0x7ffe181f] Oct 2 19:16:16.027793 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe1820-0x7ffe1847] Oct 2 19:16:16.027801 kernel: No NUMA configuration found Oct 2 19:16:16.027808 kernel: Faking a node at [mem 0x0000000000000000-0x000000007ffdcfff] Oct 2 19:16:16.027815 kernel: NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] Oct 2 19:16:16.027823 kernel: Zone ranges: Oct 2 19:16:16.027835 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:16:16.027843 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] Oct 2 19:16:16.027851 kernel: Normal empty Oct 2 19:16:16.027858 kernel: Movable zone start for each node Oct 2 19:16:16.027866 kernel: Early memory node ranges Oct 2 19:16:16.027874 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:16:16.027883 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdcfff] Oct 2 19:16:16.027891 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] Oct 2 19:16:16.027899 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:16:16.027906 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:16:16.027914 kernel: On node 0, zone DMA32: 35 pages in unavailable ranges Oct 2 19:16:16.027922 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:16:16.027929 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:16:16.027937 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:16:16.027944 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:16:16.027954 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:16:16.027961 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:16:16.027969 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:16:16.027977 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:16:16.027984 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:16:16.027992 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:16:16.027999 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Oct 2 19:16:16.028007 kernel: Booting paravirtualized kernel on KVM Oct 2 19:16:16.028015 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:16:16.028023 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:16:16.028032 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:16:16.028040 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:16:16.028047 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:16:16.028055 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Oct 2 19:16:16.028062 kernel: kvm-guest: PV spinlocks disabled, no host support Oct 2 19:16:16.028070 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515805 Oct 2 19:16:16.028077 kernel: Policy zone: DMA32 Oct 2 19:16:16.028086 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:16:16.028097 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:16:16.028105 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:16:16.028112 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:16:16.028120 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:16:16.028128 kernel: Memory: 1975340K/2096620K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121020K reserved, 0K cma-reserved) Oct 2 19:16:16.028136 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:16:16.028143 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:16:16.028151 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:16:16.028160 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:16:16.028168 kernel: rcu: RCU event tracing is enabled. Oct 2 19:16:16.028176 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:16:16.028184 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:16:16.028191 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:16:16.028199 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:16:16.028207 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:16:16.028215 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 19:16:16.028222 kernel: Console: colour VGA+ 80x25 Oct 2 19:16:16.028231 kernel: printk: console [tty0] enabled Oct 2 19:16:16.028239 kernel: printk: console [ttyS0] enabled Oct 2 19:16:16.028247 kernel: ACPI: Core revision 20210730 Oct 2 19:16:16.028254 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:16:16.028262 kernel: x2apic enabled Oct 2 19:16:16.028269 kernel: Switched APIC routing to physical x2apic. Oct 2 19:16:16.028277 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:16:16.028285 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:16:16.028292 kernel: Calibrating delay loop (skipped) preset value.. 3992.49 BogoMIPS (lpj=1996249) Oct 2 19:16:16.028300 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Oct 2 19:16:16.028310 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Oct 2 19:16:16.028318 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:16:16.028325 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:16:16.028333 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:16:16.028341 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:16:16.028348 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:16:16.028356 kernel: x86/fpu: x87 FPU will use FXSAVE Oct 2 19:16:16.028363 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:16:16.028371 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:16:16.028390 kernel: LSM: Security Framework initializing Oct 2 19:16:16.028398 kernel: SELinux: Initializing. Oct 2 19:16:16.028406 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:16:16.028414 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:16:16.028422 kernel: smpboot: CPU0: AMD Intel Core i7 9xx (Nehalem Class Core i7) (family: 0x6, model: 0x1a, stepping: 0x3) Oct 2 19:16:16.028429 kernel: Performance Events: AMD PMU driver. Oct 2 19:16:16.028437 kernel: ... version: 0 Oct 2 19:16:16.028444 kernel: ... bit width: 48 Oct 2 19:16:16.028452 kernel: ... generic registers: 4 Oct 2 19:16:16.028469 kernel: ... value mask: 0000ffffffffffff Oct 2 19:16:16.028478 kernel: ... max period: 00007fffffffffff Oct 2 19:16:16.028487 kernel: ... fixed-purpose events: 0 Oct 2 19:16:16.028494 kernel: ... event mask: 000000000000000f Oct 2 19:16:16.028502 kernel: signal: max sigframe size: 1440 Oct 2 19:16:16.028510 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:16:16.028518 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:16:16.028526 kernel: x86: Booting SMP configuration: Oct 2 19:16:16.028537 kernel: .... node #0, CPUs: #1 Oct 2 19:16:16.028544 kernel: kvm-clock: cpu 1, msr 13f8a041, secondary cpu clock Oct 2 19:16:16.028552 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Oct 2 19:16:16.028560 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:16:16.028568 kernel: smpboot: Max logical packages: 2 Oct 2 19:16:16.028576 kernel: smpboot: Total of 2 processors activated (7984.99 BogoMIPS) Oct 2 19:16:16.028584 kernel: devtmpfs: initialized Oct 2 19:16:16.028592 kernel: x86/mm: Memory block size: 128MB Oct 2 19:16:16.028600 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:16:16.028610 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:16:16.028617 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:16:16.028625 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:16:16.028633 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:16:16.028641 kernel: audit: type=2000 audit(1696274175.067:1): state=initialized audit_enabled=0 res=1 Oct 2 19:16:16.028649 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:16:16.028657 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:16:16.028665 kernel: cpuidle: using governor menu Oct 2 19:16:16.028673 kernel: ACPI: bus type PCI registered Oct 2 19:16:16.028683 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:16:16.028691 kernel: dca service started, version 1.12.1 Oct 2 19:16:16.028699 kernel: PCI: Using configuration type 1 for base access Oct 2 19:16:16.028707 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:16:16.028716 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:16:16.028724 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:16:16.028731 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:16:16.028739 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:16:16.028747 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:16:16.028757 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:16:16.028765 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:16:16.028772 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:16:16.028780 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:16:16.028788 kernel: ACPI: Interpreter enabled Oct 2 19:16:16.028796 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:16:16.028804 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:16:16.028812 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:16:16.028820 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:16:16.028831 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:16:16.028959 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:16:16.029045 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 19:16:16.029058 kernel: acpiphp: Slot [3] registered Oct 2 19:16:16.029066 kernel: acpiphp: Slot [4] registered Oct 2 19:16:16.029074 kernel: acpiphp: Slot [5] registered Oct 2 19:16:16.029082 kernel: acpiphp: Slot [6] registered Oct 2 19:16:16.029094 kernel: acpiphp: Slot [7] registered Oct 2 19:16:16.029102 kernel: acpiphp: Slot [8] registered Oct 2 19:16:16.029110 kernel: acpiphp: Slot [9] registered Oct 2 19:16:16.029118 kernel: acpiphp: Slot [10] registered Oct 2 19:16:16.029126 kernel: acpiphp: Slot [11] registered Oct 2 19:16:16.029134 kernel: acpiphp: Slot [12] registered Oct 2 19:16:16.029141 kernel: acpiphp: Slot [13] registered Oct 2 19:16:16.029149 kernel: acpiphp: Slot [14] registered Oct 2 19:16:16.029157 kernel: acpiphp: Slot [15] registered Oct 2 19:16:16.029165 kernel: acpiphp: Slot [16] registered Oct 2 19:16:16.029176 kernel: acpiphp: Slot [17] registered Oct 2 19:16:16.029184 kernel: acpiphp: Slot [18] registered Oct 2 19:16:16.029192 kernel: acpiphp: Slot [19] registered Oct 2 19:16:16.029200 kernel: acpiphp: Slot [20] registered Oct 2 19:16:16.029208 kernel: acpiphp: Slot [21] registered Oct 2 19:16:16.029215 kernel: acpiphp: Slot [22] registered Oct 2 19:16:16.029223 kernel: acpiphp: Slot [23] registered Oct 2 19:16:16.029231 kernel: acpiphp: Slot [24] registered Oct 2 19:16:16.029239 kernel: acpiphp: Slot [25] registered Oct 2 19:16:16.029248 kernel: acpiphp: Slot [26] registered Oct 2 19:16:16.029256 kernel: acpiphp: Slot [27] registered Oct 2 19:16:16.029264 kernel: acpiphp: Slot [28] registered Oct 2 19:16:16.029272 kernel: acpiphp: Slot [29] registered Oct 2 19:16:16.029280 kernel: acpiphp: Slot [30] registered Oct 2 19:16:16.029288 kernel: acpiphp: Slot [31] registered Oct 2 19:16:16.029296 kernel: PCI host bridge to bus 0000:00 Oct 2 19:16:16.029421 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:16:16.029498 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:16:16.029576 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:16:16.029659 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 19:16:16.029739 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:16:16.029811 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:16:16.029907 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:16:16.029999 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:16:16.030093 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:16:16.030177 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc120-0xc12f] Oct 2 19:16:16.030260 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:16:16.030342 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:16:16.030448 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:16:16.030532 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:16:16.030619 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:16:16.030753 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:16:16.030870 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:16:16.030962 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Oct 2 19:16:16.031046 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Oct 2 19:16:16.031130 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Oct 2 19:16:16.031213 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfeb90000-0xfeb90fff] Oct 2 19:16:16.031300 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfeb8ffff pref] Oct 2 19:16:16.033410 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:16:16.033530 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:16:16.033619 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc0bf] Oct 2 19:16:16.033709 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfeb91000-0xfeb91fff] Oct 2 19:16:16.033792 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Oct 2 19:16:16.033875 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] Oct 2 19:16:16.033999 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:16:16.034085 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:16:16.034168 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfeb92000-0xfeb92fff] Oct 2 19:16:16.034249 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Oct 2 19:16:16.034338 kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 Oct 2 19:16:16.037468 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0ff] Oct 2 19:16:16.037560 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Oct 2 19:16:16.037656 kernel: pci 0000:00:06.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:16:16.037739 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc100-0xc11f] Oct 2 19:16:16.037822 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Oct 2 19:16:16.037834 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:16:16.037842 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:16:16.037851 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:16:16.037859 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:16:16.037867 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:16:16.037879 kernel: iommu: Default domain type: Translated Oct 2 19:16:16.037887 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:16:16.037968 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:16:16.038052 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:16:16.038134 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:16:16.038146 kernel: vgaarb: loaded Oct 2 19:16:16.038154 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:16:16.038162 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:16:16.038171 kernel: PTP clock support registered Oct 2 19:16:16.038182 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:16:16.038190 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:16:16.038198 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:16:16.038206 kernel: e820: reserve RAM buffer [mem 0x7ffdd000-0x7fffffff] Oct 2 19:16:16.038214 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:16:16.038222 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:16:16.038230 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:16:16.038238 kernel: pnp: PnP ACPI init Oct 2 19:16:16.038331 kernel: pnp 00:03: [dma 2] Oct 2 19:16:16.038347 kernel: pnp: PnP ACPI: found 5 devices Oct 2 19:16:16.038356 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:16:16.038364 kernel: NET: Registered PF_INET protocol family Oct 2 19:16:16.038372 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:16:16.038406 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 19:16:16.038415 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:16:16.038423 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:16:16.038431 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 19:16:16.038444 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 19:16:16.038452 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:16:16.038460 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:16:16.038468 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:16:16.038476 kernel: NET: Registered PF_XDP protocol family Oct 2 19:16:16.038555 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:16:16.038631 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:16:16.038749 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:16:16.038858 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 19:16:16.038936 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:16:16.039019 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:16:16.039103 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:16:16.039184 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:16:16.039195 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:16:16.039204 kernel: Initialise system trusted keyrings Oct 2 19:16:16.039212 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 19:16:16.039224 kernel: Key type asymmetric registered Oct 2 19:16:16.039232 kernel: Asymmetric key parser 'x509' registered Oct 2 19:16:16.039240 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:16:16.039248 kernel: io scheduler mq-deadline registered Oct 2 19:16:16.039256 kernel: io scheduler kyber registered Oct 2 19:16:16.039264 kernel: io scheduler bfq registered Oct 2 19:16:16.039272 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:16:16.039281 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Oct 2 19:16:16.039289 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:16:16.039297 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 19:16:16.039308 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:16:16.039316 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:16:16.039324 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:16:16.039332 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:16:16.039340 kernel: random: crng init done Oct 2 19:16:16.039348 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:16:16.039356 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:16:16.039364 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:16:16.039475 kernel: rtc_cmos 00:04: RTC can wake from S4 Oct 2 19:16:16.039559 kernel: rtc_cmos 00:04: registered as rtc0 Oct 2 19:16:16.039634 kernel: rtc_cmos 00:04: setting system clock to 2023-10-02T19:16:15 UTC (1696274175) Oct 2 19:16:16.039708 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram Oct 2 19:16:16.039720 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:16:16.039729 kernel: Segment Routing with IPv6 Oct 2 19:16:16.039737 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:16:16.039745 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:16:16.039753 kernel: Key type dns_resolver registered Oct 2 19:16:16.039763 kernel: IPI shorthand broadcast: enabled Oct 2 19:16:16.039772 kernel: sched_clock: Marking stable (707323894, 117894443)->(859436073, -34217736) Oct 2 19:16:16.039780 kernel: registered taskstats version 1 Oct 2 19:16:16.039788 kernel: Loading compiled-in X.509 certificates Oct 2 19:16:16.039796 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:16:16.039804 kernel: Key type .fscrypt registered Oct 2 19:16:16.039812 kernel: Key type fscrypt-provisioning registered Oct 2 19:16:16.039820 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:16:16.039830 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:16:16.039839 kernel: ima: No architecture policies found Oct 2 19:16:16.039847 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:16:16.039855 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:16:16.039863 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:16:16.039871 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:16:16.039879 kernel: Run /init as init process Oct 2 19:16:16.039887 kernel: with arguments: Oct 2 19:16:16.039895 kernel: /init Oct 2 19:16:16.039905 kernel: with environment: Oct 2 19:16:16.039913 kernel: HOME=/ Oct 2 19:16:16.039920 kernel: TERM=linux Oct 2 19:16:16.039928 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:16:16.039939 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:16:16.039950 systemd[1]: Detected virtualization kvm. Oct 2 19:16:16.039959 systemd[1]: Detected architecture x86-64. Oct 2 19:16:16.039967 systemd[1]: Running in initrd. Oct 2 19:16:16.039979 systemd[1]: No hostname configured, using default hostname. Oct 2 19:16:16.039988 systemd[1]: Hostname set to . Oct 2 19:16:16.039997 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:16:16.040006 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:16:16.040014 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:16:16.040023 systemd[1]: Reached target cryptsetup.target. Oct 2 19:16:16.040031 systemd[1]: Reached target paths.target. Oct 2 19:16:16.040040 systemd[1]: Reached target slices.target. Oct 2 19:16:16.040051 systemd[1]: Reached target swap.target. Oct 2 19:16:16.040060 systemd[1]: Reached target timers.target. Oct 2 19:16:16.040069 systemd[1]: Listening on iscsid.socket. Oct 2 19:16:16.040077 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:16:16.040086 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:16:16.040094 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:16:16.040103 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:16:16.040112 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:16:16.040122 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:16:16.040130 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:16:16.040139 systemd[1]: Reached target sockets.target. Oct 2 19:16:16.040148 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:16:16.040167 systemd[1]: Finished network-cleanup.service. Oct 2 19:16:16.040177 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:16:16.040187 systemd[1]: Starting systemd-journald.service... Oct 2 19:16:16.040196 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:16:16.040205 systemd[1]: Starting systemd-resolved.service... Oct 2 19:16:16.040213 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:16:16.040222 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:16:16.040231 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:16:16.040243 systemd-journald[184]: Journal started Oct 2 19:16:16.040286 systemd-journald[184]: Runtime Journal (/run/log/journal/3997ef2ee6404ca5b53a3d0d252ac8ac) is 4.9M, max 39.5M, 34.5M free. Oct 2 19:16:16.007410 systemd-modules-load[185]: Inserted module 'overlay' Oct 2 19:16:16.067190 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:16:16.067213 kernel: Bridge firewalling registered Oct 2 19:16:16.067237 systemd[1]: Started systemd-journald.service. Oct 2 19:16:16.067251 kernel: audit: type=1130 audit(1696274176.062:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.053588 systemd-resolved[186]: Positive Trust Anchors: Oct 2 19:16:16.073613 kernel: audit: type=1130 audit(1696274176.067:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.053598 systemd-resolved[186]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:16:16.078099 kernel: audit: type=1130 audit(1696274176.073:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.053636 systemd-resolved[186]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:16:16.084988 kernel: SCSI subsystem initialized Oct 2 19:16:16.085006 kernel: audit: type=1130 audit(1696274176.078:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.056422 systemd-resolved[186]: Defaulting to hostname 'linux'. Oct 2 19:16:16.057704 systemd-modules-load[185]: Inserted module 'br_netfilter' Oct 2 19:16:16.067708 systemd[1]: Started systemd-resolved.service. Oct 2 19:16:16.074296 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:16:16.078770 systemd[1]: Reached target nss-lookup.target. Oct 2 19:16:16.086171 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:16:16.104982 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:16:16.105009 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:16:16.105022 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:16:16.088315 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:16:16.110048 kernel: audit: type=1130 audit(1696274176.105:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.105088 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:16:16.106152 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:16:16.116542 kernel: audit: type=1130 audit(1696274176.110:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.111420 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:16:16.114941 systemd-modules-load[185]: Inserted module 'dm_multipath' Oct 2 19:16:16.118544 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:16:16.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.120329 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:16:16.126968 kernel: audit: type=1130 audit(1696274176.119:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.128337 dracut-cmdline[203]: dracut-dracut-053 Oct 2 19:16:16.129463 dracut-cmdline[203]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:16:16.133022 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:16:16.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.137407 kernel: audit: type=1130 audit(1696274176.133:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.200413 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:16:16.214463 kernel: iscsi: registered transport (tcp) Oct 2 19:16:16.239480 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:16:16.239579 kernel: QLogic iSCSI HBA Driver Oct 2 19:16:16.292335 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:16:16.293944 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:16:16.303777 kernel: audit: type=1130 audit(1696274176.292:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.349494 kernel: raid6: sse2x4 gen() 12364 MB/s Oct 2 19:16:16.366490 kernel: raid6: sse2x4 xor() 5039 MB/s Oct 2 19:16:16.383464 kernel: raid6: sse2x2 gen() 14235 MB/s Oct 2 19:16:16.400483 kernel: raid6: sse2x2 xor() 8665 MB/s Oct 2 19:16:16.417489 kernel: raid6: sse2x1 gen() 11096 MB/s Oct 2 19:16:16.435184 kernel: raid6: sse2x1 xor() 6878 MB/s Oct 2 19:16:16.435259 kernel: raid6: using algorithm sse2x2 gen() 14235 MB/s Oct 2 19:16:16.435287 kernel: raid6: .... xor() 8665 MB/s, rmw enabled Oct 2 19:16:16.436012 kernel: raid6: using ssse3x2 recovery algorithm Oct 2 19:16:16.450485 kernel: xor: measuring software checksum speed Oct 2 19:16:16.453102 kernel: prefetch64-sse : 18465 MB/sec Oct 2 19:16:16.453159 kernel: generic_sse : 16750 MB/sec Oct 2 19:16:16.453187 kernel: xor: using function: prefetch64-sse (18465 MB/sec) Oct 2 19:16:16.568447 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:16:16.585814 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:16:16.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.590000 audit: BPF prog-id=7 op=LOAD Oct 2 19:16:16.590000 audit: BPF prog-id=8 op=LOAD Oct 2 19:16:16.591074 systemd[1]: Starting systemd-udevd.service... Oct 2 19:16:16.605750 systemd-udevd[384]: Using default interface naming scheme 'v252'. Oct 2 19:16:16.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.610939 systemd[1]: Started systemd-udevd.service. Oct 2 19:16:16.616271 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:16:16.636781 dracut-pre-trigger[401]: rd.md=0: removing MD RAID activation Oct 2 19:16:16.694256 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:16:16.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.697967 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:16:16.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.763448 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:16:16.844560 kernel: virtio_blk virtio2: [vda] 41943040 512-byte logical blocks (21.5 GB/20.0 GiB) Oct 2 19:16:16.854405 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:16:16.854458 kernel: GPT:17805311 != 41943039 Oct 2 19:16:16.854470 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:16:16.854480 kernel: GPT:17805311 != 41943039 Oct 2 19:16:16.854490 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:16:16.854501 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:16:16.878419 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (440) Oct 2 19:16:16.880317 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:16:16.924352 kernel: libata version 3.00 loaded. Oct 2 19:16:16.924374 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:16:16.924566 kernel: scsi host0: ata_piix Oct 2 19:16:16.924698 kernel: scsi host1: ata_piix Oct 2 19:16:16.924840 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc120 irq 14 Oct 2 19:16:16.924853 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc128 irq 15 Oct 2 19:16:16.925040 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:16:16.937491 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:16:16.941512 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:16:16.945604 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:16:16.946979 systemd[1]: Starting disk-uuid.service... Oct 2 19:16:16.958239 disk-uuid[458]: Primary Header is updated. Oct 2 19:16:16.958239 disk-uuid[458]: Secondary Entries is updated. Oct 2 19:16:16.958239 disk-uuid[458]: Secondary Header is updated. Oct 2 19:16:16.965439 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:16:16.972437 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:16:17.989443 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:16:17.991485 disk-uuid[459]: The operation has completed successfully. Oct 2 19:16:18.063218 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:16:18.065221 systemd[1]: Finished disk-uuid.service. Oct 2 19:16:18.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.085080 systemd[1]: Starting verity-setup.service... Oct 2 19:16:18.121446 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:16:18.236796 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:16:18.239913 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:16:18.243120 systemd[1]: Finished verity-setup.service. Oct 2 19:16:18.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.384402 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:16:18.385415 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:16:18.387236 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:16:18.389114 systemd[1]: Starting ignition-setup.service... Oct 2 19:16:18.391889 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:16:18.405448 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:16:18.405548 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:16:18.405579 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:16:18.420589 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:16:18.433852 systemd[1]: Finished ignition-setup.service. Oct 2 19:16:18.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.435304 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:16:18.524603 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:16:18.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.525000 audit: BPF prog-id=9 op=LOAD Oct 2 19:16:18.526476 systemd[1]: Starting systemd-networkd.service... Oct 2 19:16:18.553573 systemd-networkd[629]: lo: Link UP Oct 2 19:16:18.553588 systemd-networkd[629]: lo: Gained carrier Oct 2 19:16:18.554178 systemd-networkd[629]: Enumeration completed Oct 2 19:16:18.554489 systemd-networkd[629]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:16:18.555659 systemd-networkd[629]: eth0: Link UP Oct 2 19:16:18.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.555664 systemd-networkd[629]: eth0: Gained carrier Oct 2 19:16:18.556521 systemd[1]: Started systemd-networkd.service. Oct 2 19:16:18.557813 systemd[1]: Reached target network.target. Oct 2 19:16:18.560345 systemd[1]: Starting iscsiuio.service... Oct 2 19:16:18.566344 systemd[1]: Started iscsiuio.service. Oct 2 19:16:18.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.568684 systemd[1]: Starting iscsid.service... Oct 2 19:16:18.572256 iscsid[638]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:16:18.572256 iscsid[638]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:16:18.572256 iscsid[638]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:16:18.572256 iscsid[638]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:16:18.572256 iscsid[638]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:16:18.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.579722 iscsid[638]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:16:18.574951 systemd[1]: Started iscsid.service. Oct 2 19:16:18.576506 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:16:18.576975 systemd-networkd[629]: eth0: DHCPv4 address 172.24.4.56/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 19:16:18.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.596046 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:16:18.596592 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:16:18.597003 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:16:18.597442 systemd[1]: Reached target remote-fs.target. Oct 2 19:16:18.598586 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:16:18.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.608942 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:16:18.800996 ignition[541]: Ignition 2.14.0 Oct 2 19:16:18.801615 ignition[541]: Stage: fetch-offline Oct 2 19:16:18.801819 ignition[541]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:16:18.801913 ignition[541]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:16:18.806137 ignition[541]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:16:18.806598 ignition[541]: parsed url from cmdline: "" Oct 2 19:16:18.806609 ignition[541]: no config URL provided Oct 2 19:16:18.806623 ignition[541]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:16:18.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:18.809214 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:16:18.806645 ignition[541]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:16:18.812969 systemd[1]: Starting ignition-fetch.service... Oct 2 19:16:18.806723 ignition[541]: failed to fetch config: resource requires networking Oct 2 19:16:18.807334 ignition[541]: Ignition finished successfully Oct 2 19:16:18.833196 ignition[653]: Ignition 2.14.0 Oct 2 19:16:18.833223 ignition[653]: Stage: fetch Oct 2 19:16:18.833515 ignition[653]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:16:18.833560 ignition[653]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:16:18.835846 ignition[653]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:16:18.836063 ignition[653]: parsed url from cmdline: "" Oct 2 19:16:18.836073 ignition[653]: no config URL provided Oct 2 19:16:18.836086 ignition[653]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:16:18.836106 ignition[653]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:16:18.843229 ignition[653]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Oct 2 19:16:18.849324 ignition[653]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Oct 2 19:16:18.849416 ignition[653]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Oct 2 19:16:19.292702 ignition[653]: GET result: OK Oct 2 19:16:19.292911 ignition[653]: parsing config with SHA512: 6abc24898b1246fd638e7fb74c4c62705238b40e6baa3b77e6b3f7667aa78da7bfc3b0ff02064a6cf8e793278ef605694fa778751fb562bea063dc619e72e41f Oct 2 19:16:19.370021 unknown[653]: fetched base config from "system" Oct 2 19:16:19.371582 unknown[653]: fetched base config from "system" Oct 2 19:16:19.372894 unknown[653]: fetched user config from "openstack" Oct 2 19:16:19.374638 ignition[653]: fetch: fetch complete Oct 2 19:16:19.374664 ignition[653]: fetch: fetch passed Oct 2 19:16:19.374826 ignition[653]: Ignition finished successfully Oct 2 19:16:19.377790 systemd[1]: Finished ignition-fetch.service. Oct 2 19:16:19.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:19.381241 systemd[1]: Starting ignition-kargs.service... Oct 2 19:16:19.406245 ignition[659]: Ignition 2.14.0 Oct 2 19:16:19.406272 ignition[659]: Stage: kargs Oct 2 19:16:19.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:19.417860 systemd[1]: Finished ignition-kargs.service. Oct 2 19:16:19.406597 ignition[659]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:16:19.406642 ignition[659]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:16:19.408609 ignition[659]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:16:19.410514 ignition[659]: kargs: kargs passed Oct 2 19:16:19.420469 systemd[1]: Starting ignition-disks.service... Oct 2 19:16:19.410585 ignition[659]: Ignition finished successfully Oct 2 19:16:19.428602 ignition[665]: Ignition 2.14.0 Oct 2 19:16:19.428613 ignition[665]: Stage: disks Oct 2 19:16:19.428733 ignition[665]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:16:19.428757 ignition[665]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:16:19.433220 systemd[1]: Finished ignition-disks.service. Oct 2 19:16:19.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:19.430462 ignition[665]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:16:19.434584 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:16:19.431911 ignition[665]: disks: disks passed Oct 2 19:16:19.435868 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:16:19.431979 ignition[665]: Ignition finished successfully Oct 2 19:16:19.437507 systemd[1]: Reached target local-fs.target. Oct 2 19:16:19.438940 systemd[1]: Reached target sysinit.target. Oct 2 19:16:19.440223 systemd[1]: Reached target basic.target. Oct 2 19:16:19.443340 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:16:19.466701 systemd-fsck[673]: ROOT: clean, 603/1628000 files, 124049/1617920 blocks Oct 2 19:16:19.499286 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:16:19.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:19.502595 systemd[1]: Mounting sysroot.mount... Oct 2 19:16:19.526437 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:16:19.525983 systemd[1]: Mounted sysroot.mount. Oct 2 19:16:19.526544 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:16:19.528629 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:16:19.529585 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:16:19.530212 systemd[1]: Starting flatcar-openstack-hostname.service... Oct 2 19:16:19.533904 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:16:19.534531 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:16:19.539985 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:16:19.546265 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:16:19.548170 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:16:19.563693 initrd-setup-root[685]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:16:19.571890 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (680) Oct 2 19:16:19.581070 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:16:19.581142 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:16:19.581157 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:16:19.586469 initrd-setup-root[694]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:16:19.596646 initrd-setup-root[717]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:16:19.605000 initrd-setup-root[727]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:16:19.604478 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:16:19.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:19.666729 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:16:19.668243 systemd[1]: Starting ignition-mount.service... Oct 2 19:16:19.670910 systemd[1]: Starting sysroot-boot.service... Oct 2 19:16:19.674501 systemd-networkd[629]: eth0: Gained IPv6LL Oct 2 19:16:19.677066 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:16:19.677194 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:16:19.695830 ignition[747]: INFO : Ignition 2.14.0 Oct 2 19:16:19.696656 ignition[747]: INFO : Stage: mount Oct 2 19:16:19.697250 ignition[747]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:16:19.700738 ignition[747]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:16:19.702848 ignition[747]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:16:19.709275 ignition[747]: INFO : mount: mount passed Oct 2 19:16:19.709275 ignition[747]: INFO : Ignition finished successfully Oct 2 19:16:19.711690 systemd[1]: Finished ignition-mount.service. Oct 2 19:16:19.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:19.714234 systemd[1]: Finished sysroot-boot.service. Oct 2 19:16:19.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:19.752986 coreos-metadata[679]: Oct 02 19:16:19.752 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Oct 2 19:16:19.774640 coreos-metadata[679]: Oct 02 19:16:19.774 INFO Fetch successful Oct 2 19:16:19.775326 coreos-metadata[679]: Oct 02 19:16:19.775 INFO wrote hostname ci-3510-3-0-9-a7fded3d8e.novalocal to /sysroot/etc/hostname Oct 2 19:16:19.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:19.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:19.780267 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Oct 2 19:16:19.780395 systemd[1]: Finished flatcar-openstack-hostname.service. Oct 2 19:16:19.781812 systemd[1]: Starting ignition-files.service... Oct 2 19:16:19.793974 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:16:19.803405 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/vda6 scanned by mount (756) Oct 2 19:16:19.810158 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:16:19.810187 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:16:19.810200 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:16:19.823170 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:16:19.843344 ignition[775]: INFO : Ignition 2.14.0 Oct 2 19:16:19.843344 ignition[775]: INFO : Stage: files Oct 2 19:16:19.845517 ignition[775]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:16:19.845517 ignition[775]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:16:19.848741 ignition[775]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:16:19.850334 ignition[775]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:16:19.851701 ignition[775]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:16:19.851701 ignition[775]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:16:19.858733 ignition[775]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:16:19.860057 ignition[775]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:16:19.861318 ignition[775]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:16:19.860808 unknown[775]: wrote ssh authorized keys file for user: core Oct 2 19:16:19.867897 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:16:19.867897 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:16:20.346800 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:16:21.142692 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:16:21.146207 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:16:21.146207 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:16:21.146207 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:16:21.253578 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:16:21.435595 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:16:21.435595 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:16:21.441056 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:16:21.441056 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:16:21.594363 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:16:23.192963 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 19:16:23.196826 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:16:23.196826 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:16:23.196826 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:16:23.316587 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:16:26.212328 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 19:16:26.216181 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:16:26.216181 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:16:26.216181 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:16:26.476967 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:16:28.185972 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 19:16:28.190847 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:16:28.190847 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:16:28.190847 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:16:28.190847 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:16:28.190847 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:16:28.190847 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:16:28.190847 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:16:28.190847 ignition[775]: INFO : files: op(b): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(b): op(c): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(b): op(c): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(b): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(d): op(e): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(d): op(e): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(f): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(f): op(10): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(f): op(10): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(f): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(11): [started] processing unit "prepare-critools.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(11): op(12): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(11): op(12): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(11): [finished] processing unit "prepare-critools.service" Oct 2 19:16:28.213786 ignition[775]: INFO : files: op(13): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:16:28.270092 kernel: kauditd_printk_skb: 27 callbacks suppressed Oct 2 19:16:28.270127 kernel: audit: type=1130 audit(1696274188.226:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.270150 kernel: audit: type=1130 audit(1696274188.245:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.270170 kernel: audit: type=1131 audit(1696274188.245:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.270190 kernel: audit: type=1130 audit(1696274188.253:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.270469 ignition[775]: INFO : files: op(13): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:16:28.270469 ignition[775]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:16:28.270469 ignition[775]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:16:28.270469 ignition[775]: INFO : files: op(15): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:16:28.270469 ignition[775]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:16:28.270469 ignition[775]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:16:28.270469 ignition[775]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:16:28.270469 ignition[775]: INFO : files: files passed Oct 2 19:16:28.270469 ignition[775]: INFO : Ignition finished successfully Oct 2 19:16:28.285660 kernel: audit: type=1130 audit(1696274188.277:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.285684 kernel: audit: type=1131 audit(1696274188.277:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.222356 systemd[1]: Finished ignition-files.service. Oct 2 19:16:28.228941 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:16:28.287586 initrd-setup-root-after-ignition[800]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:16:28.238616 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:16:28.239464 systemd[1]: Starting ignition-quench.service... Oct 2 19:16:28.244923 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:16:28.245028 systemd[1]: Finished ignition-quench.service. Oct 2 19:16:28.253046 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:16:28.253829 systemd[1]: Reached target ignition-complete.target. Oct 2 19:16:28.262034 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:16:28.277670 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:16:28.277775 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:16:28.278473 systemd[1]: Reached target initrd-fs.target. Oct 2 19:16:28.286110 systemd[1]: Reached target initrd.target. Oct 2 19:16:28.287095 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:16:28.312760 kernel: audit: type=1130 audit(1696274188.300:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.287852 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:16:28.300521 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:16:28.301979 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:16:28.312277 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:16:28.313630 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:16:28.320233 kernel: audit: type=1131 audit(1696274188.316:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.314575 systemd[1]: Stopped target timers.target. Oct 2 19:16:28.315525 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:16:28.315692 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:16:28.316610 systemd[1]: Stopped target initrd.target. Oct 2 19:16:28.320809 systemd[1]: Stopped target basic.target. Oct 2 19:16:28.321714 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:16:28.323302 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:16:28.328317 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:16:28.329183 systemd[1]: Stopped target remote-fs.target. Oct 2 19:16:28.329978 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:16:28.330843 systemd[1]: Stopped target sysinit.target. Oct 2 19:16:28.331744 systemd[1]: Stopped target local-fs.target. Oct 2 19:16:28.338798 kernel: audit: type=1131 audit(1696274188.334:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.334000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.332592 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:16:28.333415 systemd[1]: Stopped target swap.target. Oct 2 19:16:28.343907 kernel: audit: type=1131 audit(1696274188.339:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.334208 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:16:28.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.334363 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:16:28.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.335270 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:16:28.339304 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:16:28.339482 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:16:28.340325 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:16:28.340506 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:16:28.344556 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:16:28.344706 systemd[1]: Stopped ignition-files.service. Oct 2 19:16:28.346368 systemd[1]: Stopping ignition-mount.service... Oct 2 19:16:28.354006 systemd[1]: Stopping iscsiuio.service... Oct 2 19:16:28.357180 ignition[813]: INFO : Ignition 2.14.0 Oct 2 19:16:28.357180 ignition[813]: INFO : Stage: umount Oct 2 19:16:28.362901 ignition[813]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:16:28.362901 ignition[813]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:16:28.362901 ignition[813]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:16:28.362901 ignition[813]: INFO : umount: umount passed Oct 2 19:16:28.362901 ignition[813]: INFO : Ignition finished successfully Oct 2 19:16:28.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.357717 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:16:28.365790 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:16:28.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.366124 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:16:28.368262 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:16:28.368668 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:16:28.385114 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:16:28.387360 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:16:28.387733 systemd[1]: Stopped iscsiuio.service. Oct 2 19:16:28.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.390359 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:16:28.390657 systemd[1]: Stopped ignition-mount.service. Oct 2 19:16:28.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.393076 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:16:28.393280 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:16:28.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.397135 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:16:28.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.397000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.397240 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:16:28.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.398758 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:16:28.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.398803 systemd[1]: Stopped ignition-disks.service. Oct 2 19:16:28.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.399598 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:16:28.399636 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:16:28.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.401146 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:16:28.401181 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:16:28.402835 systemd[1]: Stopped target network.target. Oct 2 19:16:28.404288 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:16:28.404328 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:16:28.405993 systemd[1]: Stopped target paths.target. Oct 2 19:16:28.407492 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:16:28.409755 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:16:28.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.410396 systemd[1]: Stopped target slices.target. Oct 2 19:16:28.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.411913 systemd[1]: Stopped target sockets.target. Oct 2 19:16:28.413849 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:16:28.413876 systemd[1]: Closed iscsid.socket. Oct 2 19:16:28.415415 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:16:28.415447 systemd[1]: Closed iscsiuio.socket. Oct 2 19:16:28.416757 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:16:28.416792 systemd[1]: Stopped ignition-setup.service. Oct 2 19:16:28.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.418336 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:16:28.418374 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:16:28.419795 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:16:28.420834 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:16:28.423422 systemd-networkd[629]: eth0: DHCPv6 lease lost Oct 2 19:16:28.429000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:16:28.424454 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:16:28.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.424562 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:16:28.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.426177 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:16:28.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.426219 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:16:28.428917 systemd[1]: Stopping network-cleanup.service... Oct 2 19:16:28.430653 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:16:28.430718 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:16:28.431681 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:16:28.431722 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:16:28.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.432911 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:16:28.432950 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:16:28.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.433795 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:16:28.441000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:16:28.436362 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:16:28.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.436937 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:16:28.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.437032 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:16:28.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.439181 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:16:28.439327 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:16:28.441964 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:16:28.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.442021 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:16:28.442523 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:16:28.442559 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:16:28.443025 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:16:28.443070 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:16:28.443769 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:16:28.443807 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:16:28.444940 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:16:28.444979 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:16:28.446968 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:16:28.447529 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:16:28.447603 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:16:28.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.454425 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:16:28.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.454486 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:16:28.455725 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:16:28.455766 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:16:28.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.457589 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:16:28.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:28.458083 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:16:28.458170 systemd[1]: Stopped network-cleanup.service. Oct 2 19:16:28.462573 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:16:28.462647 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:16:28.463452 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:16:28.465063 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:16:28.484763 systemd[1]: Switching root. Oct 2 19:16:28.506211 iscsid[638]: iscsid shutting down. Oct 2 19:16:28.507157 systemd-journald[184]: Received SIGTERM from PID 1 (n/a). Oct 2 19:16:28.507244 systemd-journald[184]: Journal stopped Oct 2 19:16:32.568314 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:16:32.568367 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:16:32.569272 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:16:32.569293 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:16:32.569305 kernel: SELinux: policy capability open_perms=1 Oct 2 19:16:32.569316 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:16:32.569335 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:16:32.569346 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:16:32.569357 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:16:32.569368 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:16:32.569391 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:16:32.569410 systemd[1]: Successfully loaded SELinux policy in 97.091ms. Oct 2 19:16:32.569435 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 21.810ms. Oct 2 19:16:32.569448 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:16:32.569462 systemd[1]: Detected virtualization kvm. Oct 2 19:16:32.569474 systemd[1]: Detected architecture x86-64. Oct 2 19:16:32.569486 systemd[1]: Detected first boot. Oct 2 19:16:32.569497 systemd[1]: Hostname set to . Oct 2 19:16:32.569509 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:16:32.569520 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:16:32.569532 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:16:32.569556 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:16:32.569570 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:16:32.569583 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:16:32.569594 systemd[1]: Stopped iscsid.service. Oct 2 19:16:32.569607 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:16:32.569622 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:16:32.569634 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:16:32.569647 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:16:32.569658 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:16:32.569670 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:16:32.569681 systemd[1]: Created slice system-getty.slice. Oct 2 19:16:32.569693 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:16:32.569704 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:16:32.569715 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:16:32.569727 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:16:32.569739 systemd[1]: Created slice user.slice. Oct 2 19:16:32.569752 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:16:32.569763 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:16:32.569774 systemd[1]: Set up automount boot.automount. Oct 2 19:16:32.569786 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:16:32.569797 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:16:32.569809 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:16:32.569822 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:16:32.569838 systemd[1]: Reached target integritysetup.target. Oct 2 19:16:32.569849 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:16:32.569861 systemd[1]: Reached target remote-fs.target. Oct 2 19:16:32.569873 systemd[1]: Reached target slices.target. Oct 2 19:16:32.569885 systemd[1]: Reached target swap.target. Oct 2 19:16:32.569896 systemd[1]: Reached target torcx.target. Oct 2 19:16:32.569907 systemd[1]: Reached target veritysetup.target. Oct 2 19:16:32.569919 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:16:32.569930 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:16:32.569944 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:16:32.569955 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:16:32.569967 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:16:32.569978 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:16:32.569989 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:16:32.570001 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:16:32.570012 systemd[1]: Mounting media.mount... Oct 2 19:16:32.570023 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:16:32.570035 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:16:32.570048 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:16:32.570060 systemd[1]: Mounting tmp.mount... Oct 2 19:16:32.570071 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:16:32.570083 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:16:32.570095 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:16:32.570108 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:16:32.570119 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:16:32.570131 systemd[1]: Starting modprobe@drm.service... Oct 2 19:16:32.570142 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:16:32.570155 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:16:32.570167 systemd[1]: Starting modprobe@loop.service... Oct 2 19:16:32.570179 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:16:32.570191 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:16:32.570202 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:16:32.570213 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:16:32.570224 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:16:32.570236 systemd[1]: Stopped systemd-journald.service. Oct 2 19:16:32.570247 systemd[1]: Starting systemd-journald.service... Oct 2 19:16:32.570260 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:16:32.570271 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:16:32.570283 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:16:32.570294 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:16:32.570305 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:16:32.570316 systemd[1]: Stopped verity-setup.service. Oct 2 19:16:32.570328 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:16:32.570340 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:16:32.570354 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:16:32.570367 systemd[1]: Mounted media.mount. Oct 2 19:16:32.570424 kernel: loop: module loaded Oct 2 19:16:32.570441 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:16:32.570453 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:16:32.570465 systemd[1]: Mounted tmp.mount. Oct 2 19:16:32.570477 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:16:32.570488 kernel: fuse: init (API version 7.34) Oct 2 19:16:32.570499 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:16:32.570511 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:16:32.570526 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:16:32.570537 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:16:32.570549 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:16:32.570560 systemd[1]: Finished modprobe@drm.service. Oct 2 19:16:32.570573 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:16:32.570589 systemd-journald[915]: Journal started Oct 2 19:16:32.570645 systemd-journald[915]: Runtime Journal (/run/log/journal/3997ef2ee6404ca5b53a3d0d252ac8ac) is 4.9M, max 39.5M, 34.5M free. Oct 2 19:16:28.809000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:16:28.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:16:28.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:16:28.933000 audit: BPF prog-id=10 op=LOAD Oct 2 19:16:28.933000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:16:28.934000 audit: BPF prog-id=11 op=LOAD Oct 2 19:16:28.934000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:16:32.370000 audit: BPF prog-id=12 op=LOAD Oct 2 19:16:32.370000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:16:32.370000 audit: BPF prog-id=13 op=LOAD Oct 2 19:16:32.370000 audit: BPF prog-id=14 op=LOAD Oct 2 19:16:32.370000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:16:32.370000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:16:32.371000 audit: BPF prog-id=15 op=LOAD Oct 2 19:16:32.371000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:16:32.371000 audit: BPF prog-id=16 op=LOAD Oct 2 19:16:32.371000 audit: BPF prog-id=17 op=LOAD Oct 2 19:16:32.371000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:16:32.371000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:16:32.372000 audit: BPF prog-id=18 op=LOAD Oct 2 19:16:32.372000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:16:32.372000 audit: BPF prog-id=19 op=LOAD Oct 2 19:16:32.372000 audit: BPF prog-id=20 op=LOAD Oct 2 19:16:32.372000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:16:32.372000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:16:32.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.385000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:16:32.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.501000 audit: BPF prog-id=21 op=LOAD Oct 2 19:16:32.502000 audit: BPF prog-id=22 op=LOAD Oct 2 19:16:32.502000 audit: BPF prog-id=23 op=LOAD Oct 2 19:16:32.502000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:16:32.502000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:16:32.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.565000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:16:32.565000 audit[915]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7fff42f4e150 a2=4000 a3=7fff42f4e1ec items=0 ppid=1 pid=915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:32.565000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:16:32.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:29.100136 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:16:32.368675 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:16:32.575371 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:16:32.575438 systemd[1]: Started systemd-journald.service. Oct 2 19:16:32.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:29.100919 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:16:32.368686 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:16:29.100940 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:16:32.373654 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:16:32.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:29.100985 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:16:29.100997 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:16:29.101029 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:16:32.576105 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:16:29.101043 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:16:32.576227 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:16:29.101249 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:16:29.101288 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:16:29.101302 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:16:32.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:29.102242 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:16:29.102278 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:16:29.102298 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:16:29.102314 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:16:32.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.577110 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:16:29.102332 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:16:32.577227 systemd[1]: Finished modprobe@loop.service. Oct 2 19:16:29.102347 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:16:31.989948 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:31Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:16:31.990218 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:31Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:16:31.990340 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:31Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:16:31.990560 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:31Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:16:31.990619 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:31Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:16:31.990700 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T19:16:31Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:16:32.579492 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:16:32.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.584409 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:16:32.585254 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:16:32.586113 systemd[1]: Reached target network-pre.target. Oct 2 19:16:32.587831 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:16:32.589487 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:16:32.589956 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:16:32.594029 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:16:32.596499 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:16:32.597033 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:16:32.600365 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:16:32.600931 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:16:32.602234 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:16:32.604243 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:16:32.605009 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:16:32.613148 systemd-journald[915]: Time spent on flushing to /var/log/journal/3997ef2ee6404ca5b53a3d0d252ac8ac is 35.242ms for 1113 entries. Oct 2 19:16:32.613148 systemd-journald[915]: System Journal (/var/log/journal/3997ef2ee6404ca5b53a3d0d252ac8ac) is 8.0M, max 584.8M, 576.8M free. Oct 2 19:16:32.681710 systemd-journald[915]: Received client request to flush runtime journal. Oct 2 19:16:32.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.629471 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:16:32.630023 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:16:32.683051 udevadm[950]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:16:32.644134 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:16:32.650920 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:16:32.652574 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:16:32.665690 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:16:32.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.667249 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:16:32.683083 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:16:32.706102 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:16:32.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.707663 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:16:32.743664 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:16:32.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.190369 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:16:33.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.192000 audit: BPF prog-id=24 op=LOAD Oct 2 19:16:33.193000 audit: BPF prog-id=25 op=LOAD Oct 2 19:16:33.193000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:16:33.193000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:16:33.195993 systemd[1]: Starting systemd-udevd.service... Oct 2 19:16:33.213922 systemd-udevd[960]: Using default interface naming scheme 'v252'. Oct 2 19:16:33.250259 systemd[1]: Started systemd-udevd.service. Oct 2 19:16:33.260216 kernel: kauditd_printk_skb: 104 callbacks suppressed Oct 2 19:16:33.260313 kernel: audit: type=1130 audit(1696274193.255:150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.260000 audit: BPF prog-id=26 op=LOAD Oct 2 19:16:33.262399 kernel: audit: type=1334 audit(1696274193.260:151): prog-id=26 op=LOAD Oct 2 19:16:33.263805 systemd[1]: Starting systemd-networkd.service... Oct 2 19:16:33.281000 audit: BPF prog-id=27 op=LOAD Oct 2 19:16:33.286182 kernel: audit: type=1334 audit(1696274193.281:152): prog-id=27 op=LOAD Oct 2 19:16:33.286227 kernel: audit: type=1334 audit(1696274193.283:153): prog-id=28 op=LOAD Oct 2 19:16:33.286251 kernel: audit: type=1334 audit(1696274193.284:154): prog-id=29 op=LOAD Oct 2 19:16:33.283000 audit: BPF prog-id=28 op=LOAD Oct 2 19:16:33.284000 audit: BPF prog-id=29 op=LOAD Oct 2 19:16:33.288712 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:16:33.338772 systemd[1]: Started systemd-userdbd.service. Oct 2 19:16:33.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.343415 kernel: audit: type=1130 audit(1696274193.338:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.344306 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:16:33.395004 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:16:33.408414 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:16:33.426741 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:16:33.433186 systemd-networkd[976]: lo: Link UP Oct 2 19:16:33.433196 systemd-networkd[976]: lo: Gained carrier Oct 2 19:16:33.433673 systemd-networkd[976]: Enumeration completed Oct 2 19:16:33.433752 systemd[1]: Started systemd-networkd.service. Oct 2 19:16:33.438653 kernel: audit: type=1130 audit(1696274193.433:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.434342 systemd-networkd[976]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:16:33.439898 systemd-networkd[976]: eth0: Link UP Oct 2 19:16:33.439908 systemd-networkd[976]: eth0: Gained carrier Oct 2 19:16:33.433000 audit[965]: AVC avc: denied { confidentiality } for pid=965 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:16:33.450831 kernel: audit: type=1400 audit(1696274193.433:157): avc: denied { confidentiality } for pid=965 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:16:33.450885 kernel: audit: type=1300 audit(1696274193.433:157): arch=c000003e syscall=175 success=yes exit=0 a0=557fbda9bd70 a1=32194 a2=7f82313d0bc5 a3=5 items=106 ppid=960 pid=965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:33.433000 audit[965]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=557fbda9bd70 a1=32194 a2=7f82313d0bc5 a3=5 items=106 ppid=960 pid=965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:33.433000 audit: CWD cwd="/" Oct 2 19:16:33.433000 audit: PATH item=0 name=(null) inode=13731 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.454426 kernel: audit: type=1307 audit(1696274193.433:157): cwd="/" Oct 2 19:16:33.433000 audit: PATH item=1 name=(null) inode=13732 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=2 name=(null) inode=13731 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=3 name=(null) inode=13733 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=4 name=(null) inode=13731 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=5 name=(null) inode=13734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=6 name=(null) inode=13734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=7 name=(null) inode=13735 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=8 name=(null) inode=13734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=9 name=(null) inode=13736 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=10 name=(null) inode=13734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=11 name=(null) inode=13737 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=12 name=(null) inode=13734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=13 name=(null) inode=13738 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=14 name=(null) inode=13734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=15 name=(null) inode=13739 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=16 name=(null) inode=13731 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=17 name=(null) inode=13740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=18 name=(null) inode=13740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=19 name=(null) inode=13741 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=20 name=(null) inode=13740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=21 name=(null) inode=13742 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=22 name=(null) inode=13740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=23 name=(null) inode=13743 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=24 name=(null) inode=13740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=25 name=(null) inode=13744 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=26 name=(null) inode=13740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=27 name=(null) inode=13745 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=28 name=(null) inode=13731 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=29 name=(null) inode=13746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=30 name=(null) inode=13746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=31 name=(null) inode=13747 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=32 name=(null) inode=13746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=33 name=(null) inode=13748 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=34 name=(null) inode=13746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=35 name=(null) inode=13749 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=36 name=(null) inode=13746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=37 name=(null) inode=13750 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=38 name=(null) inode=13746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=39 name=(null) inode=13751 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=40 name=(null) inode=13731 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=41 name=(null) inode=13752 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=42 name=(null) inode=13752 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=43 name=(null) inode=13753 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=44 name=(null) inode=13752 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=45 name=(null) inode=13754 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=46 name=(null) inode=13752 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=47 name=(null) inode=13755 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=48 name=(null) inode=13752 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=49 name=(null) inode=13756 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=50 name=(null) inode=13752 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=51 name=(null) inode=13757 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=52 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=53 name=(null) inode=13758 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=54 name=(null) inode=13758 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=55 name=(null) inode=13759 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=56 name=(null) inode=13758 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=57 name=(null) inode=13760 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=58 name=(null) inode=13758 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=59 name=(null) inode=13761 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=60 name=(null) inode=13761 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=61 name=(null) inode=13762 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=62 name=(null) inode=13761 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=63 name=(null) inode=13763 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=64 name=(null) inode=13761 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=65 name=(null) inode=13764 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=66 name=(null) inode=13761 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=67 name=(null) inode=13765 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=68 name=(null) inode=13761 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=69 name=(null) inode=13766 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=70 name=(null) inode=13758 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=71 name=(null) inode=13767 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=72 name=(null) inode=13767 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=73 name=(null) inode=13768 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=74 name=(null) inode=13767 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=75 name=(null) inode=13769 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=76 name=(null) inode=13767 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=77 name=(null) inode=13770 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=78 name=(null) inode=13767 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=79 name=(null) inode=13771 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=80 name=(null) inode=13767 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=81 name=(null) inode=13772 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=82 name=(null) inode=13758 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=83 name=(null) inode=13773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=84 name=(null) inode=13773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=85 name=(null) inode=13774 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=86 name=(null) inode=13773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=87 name=(null) inode=13775 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=88 name=(null) inode=13773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=89 name=(null) inode=13776 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=90 name=(null) inode=13773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=91 name=(null) inode=13777 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=92 name=(null) inode=13773 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=93 name=(null) inode=13778 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=94 name=(null) inode=13758 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=95 name=(null) inode=13779 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=96 name=(null) inode=13779 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=97 name=(null) inode=13780 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=98 name=(null) inode=13779 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=99 name=(null) inode=13781 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=100 name=(null) inode=13779 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=101 name=(null) inode=13782 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=102 name=(null) inode=13779 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=103 name=(null) inode=13783 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=104 name=(null) inode=13779 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PATH item=105 name=(null) inode=13784 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:16:33.433000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:16:33.456517 systemd-networkd[976]: eth0: DHCPv4 address 172.24.4.56/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 19:16:33.460407 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:16:33.475406 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:16:33.488433 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:16:33.531812 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:16:33.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.533441 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:16:33.561829 lvm[989]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:16:33.588748 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:16:33.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.590075 systemd[1]: Reached target cryptsetup.target. Oct 2 19:16:33.593433 systemd[1]: Starting lvm2-activation.service... Oct 2 19:16:33.597494 lvm[990]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:16:33.627254 systemd[1]: Finished lvm2-activation.service. Oct 2 19:16:33.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.628648 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:16:33.629865 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:16:33.629932 systemd[1]: Reached target local-fs.target. Oct 2 19:16:33.631036 systemd[1]: Reached target machines.target. Oct 2 19:16:33.634637 systemd[1]: Starting ldconfig.service... Oct 2 19:16:33.637596 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:16:33.637686 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:16:33.642191 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:16:33.647089 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:16:33.649983 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:16:33.650575 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:16:33.650617 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:16:33.651799 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:16:33.652552 systemd[1]: boot.automount: Got automount request for /boot, triggered by 992 (bootctl) Oct 2 19:16:33.653829 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:16:33.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:33.679944 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:16:33.699969 systemd-tmpfiles[995]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:16:33.702434 systemd-tmpfiles[995]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:16:33.717697 systemd-tmpfiles[995]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:16:34.479434 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:16:34.481218 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:16:34.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:34.568239 systemd-fsck[1000]: fsck.fat 4.2 (2021-01-31) Oct 2 19:16:34.568239 systemd-fsck[1000]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:16:34.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:34.574194 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:16:34.579833 systemd[1]: Mounting boot.mount... Oct 2 19:16:34.603563 systemd[1]: Mounted boot.mount. Oct 2 19:16:34.625896 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:16:34.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:34.701010 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:16:34.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:34.702857 systemd[1]: Starting audit-rules.service... Oct 2 19:16:34.704199 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:16:34.714000 audit: BPF prog-id=30 op=LOAD Oct 2 19:16:34.711616 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:16:34.726000 audit: BPF prog-id=31 op=LOAD Oct 2 19:16:34.718655 systemd[1]: Starting systemd-resolved.service... Oct 2 19:16:34.733206 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:16:34.738009 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:16:34.746000 audit[1014]: SYSTEM_BOOT pid=1014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:16:34.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:34.748833 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:16:34.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:34.750543 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:16:34.751088 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:16:34.764425 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:16:34.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:34.806000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:16:34.806000 audit[1023]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc2a80bd80 a2=420 a3=0 items=0 ppid=1003 pid=1023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:34.806000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:16:34.807770 augenrules[1023]: No rules Oct 2 19:16:34.808172 systemd[1]: Finished audit-rules.service. Oct 2 19:16:34.817248 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:16:34.817801 systemd[1]: Reached target time-set.target. Oct 2 19:16:34.844460 systemd-resolved[1009]: Positive Trust Anchors: Oct 2 19:16:34.844475 systemd-resolved[1009]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:16:34.844511 systemd-resolved[1009]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:16:34.866122 systemd-resolved[1009]: Using system hostname 'ci-3510-3-0-9-a7fded3d8e.novalocal'. Oct 2 19:16:34.868620 systemd[1]: Started systemd-resolved.service. Oct 2 19:16:34.869787 systemd[1]: Reached target network.target. Oct 2 19:16:34.870772 systemd[1]: Reached target nss-lookup.target. Oct 2 19:16:34.905599 systemd-networkd[976]: eth0: Gained IPv6LL Oct 2 19:16:35.042856 systemd-timesyncd[1013]: Contacted time server 176.137.36.37:123 (0.flatcar.pool.ntp.org). Oct 2 19:16:35.043035 systemd-timesyncd[1013]: Initial clock synchronization to Mon 2023-10-02 19:16:35.237011 UTC. Oct 2 19:16:35.157179 ldconfig[991]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:16:35.172647 systemd[1]: Finished ldconfig.service. Oct 2 19:16:35.176357 systemd[1]: Starting systemd-update-done.service... Oct 2 19:16:35.189612 systemd[1]: Finished systemd-update-done.service. Oct 2 19:16:35.190975 systemd[1]: Reached target sysinit.target. Oct 2 19:16:35.192219 systemd[1]: Started motdgen.path. Oct 2 19:16:35.193354 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:16:35.195048 systemd[1]: Started logrotate.timer. Oct 2 19:16:35.196300 systemd[1]: Started mdadm.timer. Oct 2 19:16:35.197322 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:16:35.198480 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:16:35.198553 systemd[1]: Reached target paths.target. Oct 2 19:16:35.199619 systemd[1]: Reached target timers.target. Oct 2 19:16:35.201834 systemd[1]: Listening on dbus.socket. Oct 2 19:16:35.204983 systemd[1]: Starting docker.socket... Oct 2 19:16:35.211627 systemd[1]: Listening on sshd.socket. Oct 2 19:16:35.212899 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:16:35.213788 systemd[1]: Listening on docker.socket. Oct 2 19:16:35.215029 systemd[1]: Reached target sockets.target. Oct 2 19:16:35.216089 systemd[1]: Reached target basic.target. Oct 2 19:16:35.217238 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:16:35.217300 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:16:35.219326 systemd[1]: Starting containerd.service... Oct 2 19:16:35.222175 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:16:35.226366 systemd[1]: Starting dbus.service... Oct 2 19:16:35.236695 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:16:35.243051 systemd[1]: Starting extend-filesystems.service... Oct 2 19:16:35.246795 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:16:35.252504 systemd[1]: Starting motdgen.service... Oct 2 19:16:35.254014 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:16:35.255410 systemd[1]: Starting prepare-critools.service... Oct 2 19:16:35.256751 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:16:35.260116 systemd[1]: Starting sshd-keygen.service... Oct 2 19:16:35.263118 systemd[1]: Starting systemd-logind.service... Oct 2 19:16:35.264474 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:16:35.264529 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:16:35.265013 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:16:35.265687 systemd[1]: Starting update-engine.service... Oct 2 19:16:35.269446 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:16:35.283843 jq[1037]: false Oct 2 19:16:35.281857 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:16:35.282104 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:16:35.295767 jq[1046]: true Oct 2 19:16:35.305443 tar[1048]: ./ Oct 2 19:16:35.305443 tar[1048]: ./loopback Oct 2 19:16:35.309765 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:16:35.309955 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:16:35.312554 tar[1049]: crictl Oct 2 19:16:35.318089 jq[1054]: true Oct 2 19:16:35.337787 dbus-daemon[1035]: [system] SELinux support is enabled Oct 2 19:16:35.338262 systemd[1]: Started dbus.service. Oct 2 19:16:35.340999 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:16:35.341037 systemd[1]: Reached target system-config.target. Oct 2 19:16:35.341619 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:16:35.341646 systemd[1]: Reached target user-config.target. Oct 2 19:16:35.373344 extend-filesystems[1038]: Found vda Oct 2 19:16:35.378891 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:16:35.379064 systemd[1]: Finished motdgen.service. Oct 2 19:16:35.382544 extend-filesystems[1038]: Found vda1 Oct 2 19:16:35.383203 extend-filesystems[1038]: Found vda2 Oct 2 19:16:35.384505 extend-filesystems[1038]: Found vda3 Oct 2 19:16:35.386411 extend-filesystems[1038]: Found usr Oct 2 19:16:35.387478 extend-filesystems[1038]: Found vda4 Oct 2 19:16:35.388085 extend-filesystems[1038]: Found vda6 Oct 2 19:16:35.389547 extend-filesystems[1038]: Found vda7 Oct 2 19:16:35.392248 extend-filesystems[1038]: Found vda9 Oct 2 19:16:35.409560 extend-filesystems[1038]: Checking size of /dev/vda9 Oct 2 19:16:35.448630 extend-filesystems[1038]: Resized partition /dev/vda9 Oct 2 19:16:35.464018 extend-filesystems[1089]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:16:35.489594 env[1050]: time="2023-10-02T19:16:35.489522194Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:16:35.490287 tar[1048]: ./bandwidth Oct 2 19:16:35.498401 bash[1086]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:16:35.501437 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 4635643 blocks Oct 2 19:16:35.499948 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:16:35.501586 update_engine[1045]: I1002 19:16:35.499155 1045 main.cc:92] Flatcar Update Engine starting Oct 2 19:16:35.508104 systemd[1]: Started update-engine.service. Oct 2 19:16:35.511051 systemd[1]: Started locksmithd.service. Oct 2 19:16:35.512675 update_engine[1045]: I1002 19:16:35.512583 1045 update_check_scheduler.cc:74] Next update check in 5m13s Oct 2 19:16:35.545003 systemd-logind[1044]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:16:35.545371 systemd-logind[1044]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:16:35.546087 systemd-logind[1044]: New seat seat0. Oct 2 19:16:35.553579 systemd[1]: Started systemd-logind.service. Oct 2 19:16:35.569673 kernel: EXT4-fs (vda9): resized filesystem to 4635643 Oct 2 19:16:35.621811 coreos-metadata[1033]: Oct 02 19:16:35.578 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Oct 2 19:16:35.622184 env[1050]: time="2023-10-02T19:16:35.599405660Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:16:35.622184 env[1050]: time="2023-10-02T19:16:35.621830187Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:16:35.625237 extend-filesystems[1089]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Oct 2 19:16:35.625237 extend-filesystems[1089]: old_desc_blocks = 1, new_desc_blocks = 3 Oct 2 19:16:35.625237 extend-filesystems[1089]: The filesystem on /dev/vda9 is now 4635643 (4k) blocks long. Oct 2 19:16:35.628331 extend-filesystems[1038]: Resized filesystem in /dev/vda9 Oct 2 19:16:35.625574 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.629702462Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.629741284Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.630038171Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.630063589Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.630083536Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.630114324Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.630223349Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.630591529Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.630755396Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:16:35.634657 env[1050]: time="2023-10-02T19:16:35.630795952Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:16:35.625739 systemd[1]: Finished extend-filesystems.service. Oct 2 19:16:35.635082 env[1050]: time="2023-10-02T19:16:35.630855905Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:16:35.635082 env[1050]: time="2023-10-02T19:16:35.630893335Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643026721Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643065594Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643081754Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643143801Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643167966Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643185409Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643244349Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643261532Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643276750Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643291688Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643306276Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643320552Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643447991Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:16:35.645051 env[1050]: time="2023-10-02T19:16:35.643539653Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.643881324Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.643909357Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.643925878Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.643986632Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644003413Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644018291Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644081049Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644099002Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644112878Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644127125Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644144678Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644160017Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644298246Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644318484Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645456 env[1050]: time="2023-10-02T19:16:35.644332540Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645770 env[1050]: time="2023-10-02T19:16:35.644346587Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:16:35.645770 env[1050]: time="2023-10-02T19:16:35.644364390Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:16:35.645770 env[1050]: time="2023-10-02T19:16:35.644409465Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:16:35.645770 env[1050]: time="2023-10-02T19:16:35.644431466Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:16:35.645770 env[1050]: time="2023-10-02T19:16:35.644467764Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:16:35.645885 env[1050]: time="2023-10-02T19:16:35.644687847Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:16:35.645885 env[1050]: time="2023-10-02T19:16:35.644756115Z" level=info msg="Connect containerd service" Oct 2 19:16:35.645885 env[1050]: time="2023-10-02T19:16:35.644792263Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:16:35.649863 env[1050]: time="2023-10-02T19:16:35.646292526Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:16:35.649863 env[1050]: time="2023-10-02T19:16:35.646416198Z" level=info msg="Start subscribing containerd event" Oct 2 19:16:35.649863 env[1050]: time="2023-10-02T19:16:35.646453759Z" level=info msg="Start recovering state" Oct 2 19:16:35.649863 env[1050]: time="2023-10-02T19:16:35.646502200Z" level=info msg="Start event monitor" Oct 2 19:16:35.649863 env[1050]: time="2023-10-02T19:16:35.646512288Z" level=info msg="Start snapshots syncer" Oct 2 19:16:35.649863 env[1050]: time="2023-10-02T19:16:35.646520474Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:16:35.649863 env[1050]: time="2023-10-02T19:16:35.646527697Z" level=info msg="Start streaming server" Oct 2 19:16:35.649863 env[1050]: time="2023-10-02T19:16:35.647241696Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:16:35.649863 env[1050]: time="2023-10-02T19:16:35.647834719Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:16:35.647965 systemd[1]: Started containerd.service. Oct 2 19:16:35.650500 env[1050]: time="2023-10-02T19:16:35.650476413Z" level=info msg="containerd successfully booted in 0.172799s" Oct 2 19:16:35.682375 tar[1048]: ./ptp Oct 2 19:16:35.780361 tar[1048]: ./vlan Oct 2 19:16:35.863512 tar[1048]: ./host-device Oct 2 19:16:35.918243 coreos-metadata[1033]: Oct 02 19:16:35.918 INFO Fetch successful Oct 2 19:16:35.918243 coreos-metadata[1033]: Oct 02 19:16:35.918 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:16:35.930326 coreos-metadata[1033]: Oct 02 19:16:35.930 INFO Fetch successful Oct 2 19:16:35.938559 unknown[1033]: wrote ssh authorized keys file for user: core Oct 2 19:16:35.951358 tar[1048]: ./tuning Oct 2 19:16:35.975222 update-ssh-keys[1098]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:16:35.975690 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:16:35.994426 tar[1048]: ./vrf Oct 2 19:16:36.034115 tar[1048]: ./sbr Oct 2 19:16:36.072288 tar[1048]: ./tap Oct 2 19:16:36.118569 tar[1048]: ./dhcp Oct 2 19:16:36.235699 systemd[1]: Finished prepare-critools.service. Oct 2 19:16:36.240272 tar[1048]: ./static Oct 2 19:16:36.271112 tar[1048]: ./firewall Oct 2 19:16:36.316824 tar[1048]: ./macvlan Oct 2 19:16:36.357805 tar[1048]: ./dummy Oct 2 19:16:36.399089 tar[1048]: ./bridge Oct 2 19:16:36.445192 tar[1048]: ./ipvlan Oct 2 19:16:36.489333 tar[1048]: ./portmap Oct 2 19:16:36.528960 tar[1048]: ./host-local Oct 2 19:16:36.574390 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:16:36.587974 locksmithd[1093]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:16:36.949438 sshd_keygen[1062]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:16:36.975752 systemd[1]: Finished sshd-keygen.service. Oct 2 19:16:36.977696 systemd[1]: Starting issuegen.service... Oct 2 19:16:36.985288 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:16:36.985460 systemd[1]: Finished issuegen.service. Oct 2 19:16:36.987239 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:16:36.994232 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:16:36.996256 systemd[1]: Started getty@tty1.service. Oct 2 19:16:36.998089 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:16:36.998845 systemd[1]: Reached target getty.target. Oct 2 19:16:36.999385 systemd[1]: Reached target multi-user.target. Oct 2 19:16:37.000987 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:16:37.012822 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:16:37.013252 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:16:37.015774 systemd[1]: Startup finished in 971ms (kernel) + 12.907s (initrd) + 8.335s (userspace) = 22.214s. Oct 2 19:16:45.392444 systemd[1]: Created slice system-sshd.slice. Oct 2 19:16:45.395045 systemd[1]: Started sshd@0-172.24.4.56:22-172.24.4.1:60832.service. Oct 2 19:16:46.413475 sshd[1122]: Accepted publickey for core from 172.24.4.1 port 60832 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:16:46.420329 sshd[1122]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:46.447131 systemd[1]: Created slice user-500.slice. Oct 2 19:16:46.450541 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:16:46.461519 systemd-logind[1044]: New session 1 of user core. Oct 2 19:16:46.475137 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:16:46.480145 systemd[1]: Starting user@500.service... Oct 2 19:16:46.487130 (systemd)[1125]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:46.606865 systemd[1125]: Queued start job for default target default.target. Oct 2 19:16:46.607380 systemd[1125]: Reached target paths.target. Oct 2 19:16:46.607420 systemd[1125]: Reached target sockets.target. Oct 2 19:16:46.607436 systemd[1125]: Reached target timers.target. Oct 2 19:16:46.607449 systemd[1125]: Reached target basic.target. Oct 2 19:16:46.607495 systemd[1125]: Reached target default.target. Oct 2 19:16:46.607528 systemd[1125]: Startup finished in 108ms. Oct 2 19:16:46.608649 systemd[1]: Started user@500.service. Oct 2 19:16:46.610874 systemd[1]: Started session-1.scope. Oct 2 19:16:46.981047 systemd[1]: Started sshd@1-172.24.4.56:22-172.24.4.1:60844.service. Oct 2 19:16:48.652295 sshd[1134]: Accepted publickey for core from 172.24.4.1 port 60844 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:16:48.655213 sshd[1134]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:48.666759 systemd-logind[1044]: New session 2 of user core. Oct 2 19:16:48.668436 systemd[1]: Started session-2.scope. Oct 2 19:16:49.376075 sshd[1134]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:49.381259 systemd[1]: Started sshd@2-172.24.4.56:22-172.24.4.1:60860.service. Oct 2 19:16:49.384690 systemd[1]: sshd@1-172.24.4.56:22-172.24.4.1:60844.service: Deactivated successfully. Oct 2 19:16:49.386477 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:16:49.389985 systemd-logind[1044]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:16:49.392721 systemd-logind[1044]: Removed session 2. Oct 2 19:16:50.562375 sshd[1139]: Accepted publickey for core from 172.24.4.1 port 60860 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:16:50.564912 sshd[1139]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:50.574987 systemd-logind[1044]: New session 3 of user core. Oct 2 19:16:50.575777 systemd[1]: Started session-3.scope. Oct 2 19:16:51.149085 sshd[1139]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:51.155985 systemd[1]: Started sshd@3-172.24.4.56:22-172.24.4.1:60864.service. Oct 2 19:16:51.157162 systemd[1]: sshd@2-172.24.4.56:22-172.24.4.1:60860.service: Deactivated successfully. Oct 2 19:16:51.159701 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:16:51.162327 systemd-logind[1044]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:16:51.165077 systemd-logind[1044]: Removed session 3. Oct 2 19:16:52.640730 sshd[1145]: Accepted publickey for core from 172.24.4.1 port 60864 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:16:52.645549 sshd[1145]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:52.656689 systemd-logind[1044]: New session 4 of user core. Oct 2 19:16:52.657582 systemd[1]: Started session-4.scope. Oct 2 19:16:53.325118 sshd[1145]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:53.332376 systemd[1]: Started sshd@4-172.24.4.56:22-172.24.4.1:60870.service. Oct 2 19:16:53.335963 systemd[1]: sshd@3-172.24.4.56:22-172.24.4.1:60864.service: Deactivated successfully. Oct 2 19:16:53.337649 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:16:53.340717 systemd-logind[1044]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:16:53.343378 systemd-logind[1044]: Removed session 4. Oct 2 19:16:54.823507 sshd[1151]: Accepted publickey for core from 172.24.4.1 port 60870 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:16:54.828900 sshd[1151]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:54.842855 systemd[1]: Started session-5.scope. Oct 2 19:16:54.844416 systemd-logind[1044]: New session 5 of user core. Oct 2 19:16:55.202931 sudo[1155]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:16:55.204472 sudo[1155]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:16:55.214696 dbus-daemon[1035]: \xd0\xdd\xfe\xf1GV: received setenforce notice (enforcing=-990404272) Oct 2 19:16:55.218724 sudo[1155]: pam_unix(sudo:session): session closed for user root Oct 2 19:16:55.401125 sshd[1151]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:55.407255 systemd[1]: Started sshd@5-172.24.4.56:22-172.24.4.1:42638.service. Oct 2 19:16:55.410886 systemd[1]: sshd@4-172.24.4.56:22-172.24.4.1:60870.service: Deactivated successfully. Oct 2 19:16:55.412465 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:16:55.415259 systemd-logind[1044]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:16:55.418782 systemd-logind[1044]: Removed session 5. Oct 2 19:16:56.931301 sshd[1158]: Accepted publickey for core from 172.24.4.1 port 42638 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:16:56.934061 sshd[1158]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:56.944244 systemd-logind[1044]: New session 6 of user core. Oct 2 19:16:56.945118 systemd[1]: Started session-6.scope. Oct 2 19:16:57.410607 sudo[1163]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:16:57.411088 sudo[1163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:16:57.417935 sudo[1163]: pam_unix(sudo:session): session closed for user root Oct 2 19:16:57.428971 sudo[1162]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:16:57.430115 sudo[1162]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:16:57.452705 systemd[1]: Stopping audit-rules.service... Oct 2 19:16:57.453000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:16:57.457291 kernel: kauditd_printk_skb: 124 callbacks suppressed Oct 2 19:16:57.457458 kernel: audit: type=1305 audit(1696274217.453:173): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:16:57.462456 auditctl[1166]: No rules Oct 2 19:16:57.453000 audit[1166]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc085206c0 a2=420 a3=0 items=0 ppid=1 pid=1166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:57.473239 kernel: audit: type=1300 audit(1696274217.453:173): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc085206c0 a2=420 a3=0 items=0 ppid=1 pid=1166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:57.463796 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:16:57.464185 systemd[1]: Stopped audit-rules.service. Oct 2 19:16:57.453000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:16:57.475294 systemd[1]: Starting audit-rules.service... Oct 2 19:16:57.477608 kernel: audit: type=1327 audit(1696274217.453:173): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:16:57.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.486451 kernel: audit: type=1131 audit(1696274217.461:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.508869 augenrules[1183]: No rules Oct 2 19:16:57.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.510660 systemd[1]: Finished audit-rules.service. Oct 2 19:16:57.512918 sudo[1162]: pam_unix(sudo:session): session closed for user root Oct 2 19:16:57.512000 audit[1162]: USER_END pid=1162 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.520908 kernel: audit: type=1130 audit(1696274217.510:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.521018 kernel: audit: type=1106 audit(1696274217.512:176): pid=1162 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.521076 kernel: audit: type=1104 audit(1696274217.512:177): pid=1162 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.512000 audit[1162]: CRED_DISP pid=1162 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.667750 sshd[1158]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:57.673000 audit[1158]: USER_END pid=1158 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:16:57.674849 systemd[1]: Started sshd@6-172.24.4.56:22-172.24.4.1:42640.service. Oct 2 19:16:57.677019 systemd[1]: sshd@5-172.24.4.56:22-172.24.4.1:42638.service: Deactivated successfully. Oct 2 19:16:57.678521 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:16:57.683315 systemd-logind[1044]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:16:57.685643 systemd-logind[1044]: Removed session 6. Oct 2 19:16:57.689405 kernel: audit: type=1106 audit(1696274217.673:178): pid=1158 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:16:57.689527 kernel: audit: type=1104 audit(1696274217.674:179): pid=1158 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:16:57.674000 audit[1158]: CRED_DISP pid=1158 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:16:57.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.56:22-172.24.4.1:42640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.704561 kernel: audit: type=1130 audit(1696274217.674:180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.56:22-172.24.4.1:42640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.56:22-172.24.4.1:42638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:58.864000 audit[1188]: USER_ACCT pid=1188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:16:58.866463 sshd[1188]: Accepted publickey for core from 172.24.4.1 port 42640 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:16:58.866000 audit[1188]: CRED_ACQ pid=1188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:16:58.867000 audit[1188]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc07eb7220 a2=3 a3=0 items=0 ppid=1 pid=1188 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:58.867000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:58.869691 sshd[1188]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:58.883269 systemd[1]: Started session-7.scope. Oct 2 19:16:58.884126 systemd-logind[1044]: New session 7 of user core. Oct 2 19:16:58.894000 audit[1188]: USER_START pid=1188 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:16:58.897000 audit[1191]: CRED_ACQ pid=1191 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:16:59.293000 audit[1192]: USER_ACCT pid=1192 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:59.294777 sudo[1192]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:16:59.295000 audit[1192]: CRED_REFR pid=1192 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:59.295958 sudo[1192]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:16:59.300000 audit[1192]: USER_START pid=1192 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:17:00.001804 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:17:00.015579 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:17:00.016340 systemd[1]: Reached target network-online.target. Oct 2 19:17:00.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:00.019538 systemd[1]: Starting docker.service... Oct 2 19:17:00.082785 env[1208]: time="2023-10-02T19:17:00.082691695Z" level=info msg="Starting up" Oct 2 19:17:00.084738 env[1208]: time="2023-10-02T19:17:00.084696416Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:17:00.084738 env[1208]: time="2023-10-02T19:17:00.084719262Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:17:00.084738 env[1208]: time="2023-10-02T19:17:00.084739681Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:17:00.084738 env[1208]: time="2023-10-02T19:17:00.084753109Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:17:00.089578 env[1208]: time="2023-10-02T19:17:00.089520247Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:17:00.089826 env[1208]: time="2023-10-02T19:17:00.089783519Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:17:00.090029 env[1208]: time="2023-10-02T19:17:00.089983641Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:17:00.090181 env[1208]: time="2023-10-02T19:17:00.090146125Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:17:00.114926 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3528405958-merged.mount: Deactivated successfully. Oct 2 19:17:00.160582 env[1208]: time="2023-10-02T19:17:00.160533783Z" level=info msg="Loading containers: start." Oct 2 19:17:00.246000 audit[1241]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.246000 audit[1241]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff80c78c30 a2=0 a3=7fff80c78c1c items=0 ppid=1208 pid=1241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.246000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:17:00.250000 audit[1243]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.250000 audit[1243]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcc20b87b0 a2=0 a3=7ffcc20b879c items=0 ppid=1208 pid=1243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.250000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:17:00.256000 audit[1245]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1245 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.256000 audit[1245]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffe4cc9b50 a2=0 a3=7fffe4cc9b3c items=0 ppid=1208 pid=1245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.256000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:17:00.260000 audit[1247]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1247 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.260000 audit[1247]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdbab227e0 a2=0 a3=7ffdbab227cc items=0 ppid=1208 pid=1247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.260000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:17:00.265000 audit[1249]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.265000 audit[1249]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff695aa330 a2=0 a3=7fff695aa31c items=0 ppid=1208 pid=1249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.265000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:17:00.290000 audit[1254]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.290000 audit[1254]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff072f6be0 a2=0 a3=7fff072f6bcc items=0 ppid=1208 pid=1254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.290000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:17:00.311000 audit[1256]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.311000 audit[1256]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdd6224e40 a2=0 a3=7ffdd6224e2c items=0 ppid=1208 pid=1256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.311000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:17:00.317000 audit[1258]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.317000 audit[1258]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffdd05745a0 a2=0 a3=7ffdd057458c items=0 ppid=1208 pid=1258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.317000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:17:00.322000 audit[1260]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.322000 audit[1260]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffcd560d3d0 a2=0 a3=7ffcd560d3bc items=0 ppid=1208 pid=1260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.322000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:17:00.337000 audit[1264]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.337000 audit[1264]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe4df593e0 a2=0 a3=7ffe4df593cc items=0 ppid=1208 pid=1264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.337000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:17:00.341000 audit[1265]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.341000 audit[1265]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc6e25a000 a2=0 a3=7ffc6e259fec items=0 ppid=1208 pid=1265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.341000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:17:00.366451 kernel: Initializing XFRM netlink socket Oct 2 19:17:00.445023 env[1208]: time="2023-10-02T19:17:00.444984687Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:17:00.473000 audit[1274]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.473000 audit[1274]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffcc70850e0 a2=0 a3=7ffcc70850cc items=0 ppid=1208 pid=1274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.473000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:17:00.484000 audit[1277]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1277 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.484000 audit[1277]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc4cbf6790 a2=0 a3=7ffc4cbf677c items=0 ppid=1208 pid=1277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.484000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:17:00.490000 audit[1280]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.490000 audit[1280]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff68757430 a2=0 a3=7fff6875741c items=0 ppid=1208 pid=1280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.490000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:17:00.492000 audit[1282]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.492000 audit[1282]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe93fda580 a2=0 a3=7ffe93fda56c items=0 ppid=1208 pid=1282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.492000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:17:00.493000 audit[1284]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.493000 audit[1284]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffefccec8c0 a2=0 a3=7ffefccec8ac items=0 ppid=1208 pid=1284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.493000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:17:00.495000 audit[1286]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.495000 audit[1286]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffcd3fc9ac0 a2=0 a3=7ffcd3fc9aac items=0 ppid=1208 pid=1286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.495000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:17:00.497000 audit[1288]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.497000 audit[1288]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff7508c490 a2=0 a3=7fff7508c47c items=0 ppid=1208 pid=1288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.497000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:17:00.509000 audit[1291]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.509000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd381c9770 a2=0 a3=7ffd381c975c items=0 ppid=1208 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.509000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:17:00.511000 audit[1293]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.511000 audit[1293]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fffccfd8960 a2=0 a3=7fffccfd894c items=0 ppid=1208 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.511000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:17:00.513000 audit[1295]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.513000 audit[1295]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffd9754e90 a2=0 a3=7fffd9754e7c items=0 ppid=1208 pid=1295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.513000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:17:00.515000 audit[1297]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.515000 audit[1297]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffec4cc4d50 a2=0 a3=7ffec4cc4d3c items=0 ppid=1208 pid=1297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.515000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:17:00.516919 systemd-networkd[976]: docker0: Link UP Oct 2 19:17:00.527000 audit[1301]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.527000 audit[1301]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd0daacb70 a2=0 a3=7ffd0daacb5c items=0 ppid=1208 pid=1301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.527000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:17:00.528000 audit[1302]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:00.528000 audit[1302]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd331733e0 a2=0 a3=7ffd331733cc items=0 ppid=1208 pid=1302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:00.528000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:17:00.530622 env[1208]: time="2023-10-02T19:17:00.530584311Z" level=info msg="Loading containers: done." Oct 2 19:17:00.541823 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck829770138-merged.mount: Deactivated successfully. Oct 2 19:17:00.557861 env[1208]: time="2023-10-02T19:17:00.557817414Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:17:00.558177 env[1208]: time="2023-10-02T19:17:00.558159492Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:17:00.558351 env[1208]: time="2023-10-02T19:17:00.558335945Z" level=info msg="Daemon has completed initialization" Oct 2 19:17:00.579980 systemd[1]: Started docker.service. Oct 2 19:17:00.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:00.587317 env[1208]: time="2023-10-02T19:17:00.587275686Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:17:00.605751 systemd[1]: Reloading. Oct 2 19:17:00.703620 /usr/lib/systemd/system-generators/torcx-generator[1348]: time="2023-10-02T19:17:00Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:17:00.703656 /usr/lib/systemd/system-generators/torcx-generator[1348]: time="2023-10-02T19:17:00Z" level=info msg="torcx already run" Oct 2 19:17:00.780450 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:17:00.780470 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:17:00.807217 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:17:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit: BPF prog-id=37 op=LOAD Oct 2 19:17:00.873000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit: BPF prog-id=38 op=LOAD Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.873000 audit: BPF prog-id=39 op=LOAD Oct 2 19:17:00.873000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:17:00.873000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:17:00.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.875000 audit: BPF prog-id=40 op=LOAD Oct 2 19:17:00.875000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit: BPF prog-id=41 op=LOAD Oct 2 19:17:00.878000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit: BPF prog-id=42 op=LOAD Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit: BPF prog-id=43 op=LOAD Oct 2 19:17:00.879000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:17:00.879000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit: BPF prog-id=44 op=LOAD Oct 2 19:17:00.880000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.880000 audit: BPF prog-id=45 op=LOAD Oct 2 19:17:00.880000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit: BPF prog-id=46 op=LOAD Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit: BPF prog-id=47 op=LOAD Oct 2 19:17:00.884000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:17:00.884000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.884000 audit: BPF prog-id=48 op=LOAD Oct 2 19:17:00.884000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit: BPF prog-id=49 op=LOAD Oct 2 19:17:00.885000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit: BPF prog-id=50 op=LOAD Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:00.886000 audit: BPF prog-id=51 op=LOAD Oct 2 19:17:00.886000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:17:00.886000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:17:00.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:00.893996 systemd[1]: Started kubelet.service. Oct 2 19:17:00.978198 kubelet[1394]: E1002 19:17:00.978155 1394 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:17:00.980524 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:17:00.980672 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:17:00.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:17:01.932876 env[1050]: time="2023-10-02T19:17:01.932728571Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:17:02.759608 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4019183885.mount: Deactivated successfully. Oct 2 19:17:05.376175 env[1050]: time="2023-10-02T19:17:05.376021552Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:05.385457 env[1050]: time="2023-10-02T19:17:05.385334458Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:05.388736 env[1050]: time="2023-10-02T19:17:05.388684871Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:05.394008 env[1050]: time="2023-10-02T19:17:05.393960197Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:05.395876 env[1050]: time="2023-10-02T19:17:05.395830799Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 19:17:05.411663 env[1050]: time="2023-10-02T19:17:05.411581466Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:17:08.305077 env[1050]: time="2023-10-02T19:17:08.304140498Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:08.307685 env[1050]: time="2023-10-02T19:17:08.307632607Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:08.309906 env[1050]: time="2023-10-02T19:17:08.309865227Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:08.312053 env[1050]: time="2023-10-02T19:17:08.311995530Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:08.312399 env[1050]: time="2023-10-02T19:17:08.312327763Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 19:17:08.330058 env[1050]: time="2023-10-02T19:17:08.329985454Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:17:10.460809 env[1050]: time="2023-10-02T19:17:10.460705697Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:10.466848 env[1050]: time="2023-10-02T19:17:10.464360046Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:10.472025 env[1050]: time="2023-10-02T19:17:10.469870500Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:10.477081 env[1050]: time="2023-10-02T19:17:10.477018263Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 19:17:10.477464 env[1050]: time="2023-10-02T19:17:10.477245139Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:10.503375 env[1050]: time="2023-10-02T19:17:10.503271408Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:17:11.008494 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:17:11.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:11.009019 systemd[1]: Stopped kubelet.service. Oct 2 19:17:11.019718 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:17:11.019854 kernel: audit: type=1130 audit(1696274231.007:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:11.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:11.025615 systemd[1]: Started kubelet.service. Oct 2 19:17:11.028930 kernel: audit: type=1131 audit(1696274231.007:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:11.029061 kernel: audit: type=1130 audit(1696274231.024:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:11.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:11.151227 kubelet[1430]: E1002 19:17:11.151137 1430 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:17:11.161575 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:17:11.161725 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:17:11.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:17:11.166405 kernel: audit: type=1131 audit(1696274231.160:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:17:11.855037 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4134465931.mount: Deactivated successfully. Oct 2 19:17:12.726286 env[1050]: time="2023-10-02T19:17:12.726210068Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:12.728400 env[1050]: time="2023-10-02T19:17:12.728355350Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:12.731092 env[1050]: time="2023-10-02T19:17:12.731070906Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:12.733663 env[1050]: time="2023-10-02T19:17:12.733640256Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:12.734346 env[1050]: time="2023-10-02T19:17:12.734320667Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 19:17:12.748501 env[1050]: time="2023-10-02T19:17:12.748470437Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:17:13.339812 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2010276877.mount: Deactivated successfully. Oct 2 19:17:13.352645 env[1050]: time="2023-10-02T19:17:13.352560404Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:13.355560 env[1050]: time="2023-10-02T19:17:13.355509185Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:13.358656 env[1050]: time="2023-10-02T19:17:13.358606896Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:13.361748 env[1050]: time="2023-10-02T19:17:13.361661100Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:13.363440 env[1050]: time="2023-10-02T19:17:13.363336139Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:17:13.386469 env[1050]: time="2023-10-02T19:17:13.386354679Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:17:14.383790 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3489119753.mount: Deactivated successfully. Oct 2 19:17:20.820545 update_engine[1045]: I1002 19:17:20.820080 1045 update_attempter.cc:505] Updating boot flags... Oct 2 19:17:21.181076 kernel: audit: type=1130 audit(1696274241.167:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.168453 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:17:21.168931 systemd[1]: Stopped kubelet.service. Oct 2 19:17:21.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.193536 kernel: audit: type=1131 audit(1696274241.176:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.182339 systemd[1]: Started kubelet.service. Oct 2 19:17:21.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.207431 kernel: audit: type=1130 audit(1696274241.181:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.398863 kubelet[1454]: E1002 19:17:21.398817 1454 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:17:21.405715 kernel: audit: type=1131 audit(1696274241.400:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:17:21.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:17:21.401142 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:17:21.401283 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:17:21.599244 env[1050]: time="2023-10-02T19:17:21.599117814Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:21.602940 env[1050]: time="2023-10-02T19:17:21.602887103Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:21.607922 env[1050]: time="2023-10-02T19:17:21.607872672Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:21.611489 env[1050]: time="2023-10-02T19:17:21.611374459Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:21.612653 env[1050]: time="2023-10-02T19:17:21.612595261Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:17:21.629985 env[1050]: time="2023-10-02T19:17:21.629921472Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:17:22.322746 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount782725158.mount: Deactivated successfully. Oct 2 19:17:23.584340 env[1050]: time="2023-10-02T19:17:23.582937888Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:23.591285 env[1050]: time="2023-10-02T19:17:23.587895425Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:23.591285 env[1050]: time="2023-10-02T19:17:23.589132735Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:23.591678 env[1050]: time="2023-10-02T19:17:23.591611865Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:23.592305 env[1050]: time="2023-10-02T19:17:23.592253448Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:17:27.586694 systemd[1]: Stopped kubelet.service. Oct 2 19:17:27.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:27.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:27.594779 kernel: audit: type=1130 audit(1696274247.585:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:27.594877 kernel: audit: type=1131 audit(1696274247.588:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:27.625174 systemd[1]: Reloading. Oct 2 19:17:27.767532 /usr/lib/systemd/system-generators/torcx-generator[1568]: time="2023-10-02T19:17:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:17:27.767927 /usr/lib/systemd/system-generators/torcx-generator[1568]: time="2023-10-02T19:17:27Z" level=info msg="torcx already run" Oct 2 19:17:27.824834 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:17:27.824853 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:17:27.850876 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:17:27.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919932 kernel: audit: type=1400 audit(1696274247.915:400): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.925402 kernel: audit: type=1400 audit(1696274247.915:401): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930399 kernel: audit: type=1400 audit(1696274247.915:402): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.938511 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:17:27.938568 kernel: audit: type=1400 audit(1696274247.915:403): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.938596 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:17:27.938619 kernel: audit: backlog limit exceeded Oct 2 19:17:27.938645 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:17:27.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit: BPF prog-id=52 op=LOAD Oct 2 19:17:27.919000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit: BPF prog-id=53 op=LOAD Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.919000 audit: BPF prog-id=54 op=LOAD Oct 2 19:17:27.920000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:17:27.920000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.924000 audit: BPF prog-id=55 op=LOAD Oct 2 19:17:27.924000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit: BPF prog-id=56 op=LOAD Oct 2 19:17:27.930000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.930000 audit: BPF prog-id=57 op=LOAD Oct 2 19:17:27.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit: BPF prog-id=61 op=LOAD Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.940000 audit: BPF prog-id=62 op=LOAD Oct 2 19:17:27.940000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:17:27.940000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:17:27.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit: BPF prog-id=63 op=LOAD Oct 2 19:17:27.942000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit: BPF prog-id=64 op=LOAD Oct 2 19:17:27.943000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit: BPF prog-id=65 op=LOAD Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:27.943000 audit: BPF prog-id=66 op=LOAD Oct 2 19:17:27.944000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:17:27.944000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:17:27.960907 systemd[1]: Started kubelet.service. Oct 2 19:17:27.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:28.035114 kubelet[1610]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:17:28.035523 kubelet[1610]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:17:28.035584 kubelet[1610]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:17:28.035700 kubelet[1610]: I1002 19:17:28.035675 1610 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:17:28.383798 kubelet[1610]: I1002 19:17:28.383767 1610 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:17:28.383965 kubelet[1610]: I1002 19:17:28.383955 1610 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:17:28.384226 kubelet[1610]: I1002 19:17:28.384213 1610 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:17:28.390242 kubelet[1610]: E1002 19:17:28.390207 1610 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.56:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:28.390355 kubelet[1610]: I1002 19:17:28.390301 1610 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:17:28.391046 kubelet[1610]: I1002 19:17:28.391020 1610 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:17:28.391331 kubelet[1610]: I1002 19:17:28.391318 1610 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:17:28.391495 kubelet[1610]: I1002 19:17:28.391482 1610 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:17:28.391642 kubelet[1610]: I1002 19:17:28.391628 1610 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:17:28.391708 kubelet[1610]: I1002 19:17:28.391699 1610 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:17:28.391856 kubelet[1610]: I1002 19:17:28.391844 1610 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:17:28.395573 kubelet[1610]: I1002 19:17:28.395550 1610 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:17:28.395739 kubelet[1610]: I1002 19:17:28.395725 1610 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:17:28.395835 kubelet[1610]: I1002 19:17:28.395823 1610 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:17:28.395932 kubelet[1610]: I1002 19:17:28.395917 1610 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:17:28.397814 kubelet[1610]: I1002 19:17:28.397769 1610 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:17:28.398484 kubelet[1610]: W1002 19:17:28.398458 1610 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:17:28.399330 kubelet[1610]: I1002 19:17:28.399299 1610 server.go:1168] "Started kubelet" Oct 2 19:17:28.399620 kubelet[1610]: W1002 19:17:28.399551 1610 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.56:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-9-a7fded3d8e.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:28.399665 kubelet[1610]: E1002 19:17:28.399652 1610 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.56:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-9-a7fded3d8e.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:28.401715 kubelet[1610]: W1002 19:17:28.401683 1610 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.56:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:28.401828 kubelet[1610]: E1002 19:17:28.401816 1610 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.56:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:28.401992 kubelet[1610]: I1002 19:17:28.401979 1610 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:17:28.402628 kubelet[1610]: I1002 19:17:28.402617 1610 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:17:28.403824 kubelet[1610]: I1002 19:17:28.403809 1610 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:17:28.403000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:28.403000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:17:28.403000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008f56b0 a1=c000235110 a2=c0008f5680 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.403000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:17:28.403000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:28.403000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:17:28.403000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008e50a0 a1=c000235128 a2=c0008f5740 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.403000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:17:28.404748 kubelet[1610]: I1002 19:17:28.404335 1610 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:17:28.404748 kubelet[1610]: I1002 19:17:28.404453 1610 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:17:28.404748 kubelet[1610]: I1002 19:17:28.404589 1610 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:17:28.410368 kubelet[1610]: E1002 19:17:28.410342 1610 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:17:28.410583 kubelet[1610]: E1002 19:17:28.410571 1610 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:17:28.411729 kubelet[1610]: I1002 19:17:28.411714 1610 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:17:28.411876 kubelet[1610]: I1002 19:17:28.411863 1610 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:17:28.411969 kubelet[1610]: E1002 19:17:28.411652 1610 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-0-9-a7fded3d8e.novalocal.178a6071117b1621", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-0-9-a7fded3d8e.novalocal", UID:"ci-3510-3-0-9-a7fded3d8e.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-0-9-a7fded3d8e.novalocal"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 17, 28, 399263265, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 17, 28, 399263265, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.56:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.56:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:17:28.412941 kubelet[1610]: W1002 19:17:28.412905 1610 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.56:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:28.413057 kubelet[1610]: E1002 19:17:28.413045 1610 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.56:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:28.413181 kubelet[1610]: E1002 19:17:28.413170 1610 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.56:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-9-a7fded3d8e.novalocal?timeout=10s\": dial tcp 172.24.4.56:6443: connect: connection refused" interval="200ms" Oct 2 19:17:28.414000 audit[1621]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:28.414000 audit[1621]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff6bdec090 a2=0 a3=7fff6bdec07c items=0 ppid=1610 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.414000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:17:28.415000 audit[1622]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:28.415000 audit[1622]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb83ac550 a2=0 a3=7fffb83ac53c items=0 ppid=1610 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:17:28.417000 audit[1624]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:28.417000 audit[1624]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc755c53c0 a2=0 a3=7ffc755c53ac items=0 ppid=1610 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.417000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:17:28.419000 audit[1626]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1626 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:28.419000 audit[1626]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe8e2b4a50 a2=0 a3=7ffe8e2b4a3c items=0 ppid=1610 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.419000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:17:28.438000 audit[1632]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:28.438000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc1764d6a0 a2=0 a3=7ffc1764d68c items=0 ppid=1610 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.438000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:17:28.440585 kubelet[1610]: I1002 19:17:28.440549 1610 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:17:28.441000 audit[1634]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:28.441000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc6aad9760 a2=0 a3=7ffc6aad974c items=0 ppid=1610 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:17:28.442957 kubelet[1610]: I1002 19:17:28.442945 1610 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:17:28.443061 kubelet[1610]: I1002 19:17:28.443050 1610 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:17:28.443152 kubelet[1610]: I1002 19:17:28.443141 1610 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:17:28.443265 kubelet[1610]: E1002 19:17:28.443255 1610 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:17:28.443000 audit[1635]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:28.443000 audit[1635]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff37e5b430 a2=0 a3=7fff37e5b41c items=0 ppid=1610 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:17:28.445000 audit[1636]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:28.445000 audit[1636]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee2526500 a2=0 a3=7ffee25264ec items=0 ppid=1610 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.445000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:17:28.448000 audit[1637]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:28.448000 audit[1637]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1de8dea0 a2=0 a3=7ffc1de8de8c items=0 ppid=1610 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.448000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:17:28.450000 audit[1638]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:28.450000 audit[1638]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffce9c64f30 a2=0 a3=7ffce9c64f1c items=0 ppid=1610 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:17:28.454092 kubelet[1610]: W1002 19:17:28.454049 1610 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.56:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:28.454216 kubelet[1610]: E1002 19:17:28.454205 1610 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.56:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:28.455000 audit[1639]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:28.455000 audit[1639]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fffb87d0e20 a2=0 a3=7fffb87d0e0c items=0 ppid=1610 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.455000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:17:28.457000 audit[1640]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:28.457000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc2bc50c20 a2=0 a3=7ffc2bc50c0c items=0 ppid=1610 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.457000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:17:28.470524 kubelet[1610]: I1002 19:17:28.470491 1610 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:17:28.470650 kubelet[1610]: I1002 19:17:28.470532 1610 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:17:28.470650 kubelet[1610]: I1002 19:17:28.470561 1610 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:17:28.476455 kubelet[1610]: I1002 19:17:28.476423 1610 policy_none.go:49] "None policy: Start" Oct 2 19:17:28.477673 kubelet[1610]: I1002 19:17:28.477661 1610 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:17:28.477794 kubelet[1610]: I1002 19:17:28.477782 1610 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:17:28.488482 systemd[1]: Created slice kubepods.slice. Oct 2 19:17:28.496080 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:17:28.501284 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:17:28.508269 kubelet[1610]: I1002 19:17:28.508253 1610 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:17:28.508000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:28.508000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:17:28.508000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e561e0 a1=c000e1cc30 a2=c000e561b0 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:28.508000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:17:28.509196 kubelet[1610]: I1002 19:17:28.509185 1610 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:17:28.509583 kubelet[1610]: I1002 19:17:28.509572 1610 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:17:28.511043 kubelet[1610]: E1002 19:17:28.511024 1610 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510-3-0-9-a7fded3d8e.novalocal\" not found" Oct 2 19:17:28.512988 kubelet[1610]: I1002 19:17:28.512948 1610 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.513481 kubelet[1610]: E1002 19:17:28.513469 1610 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.56:6443/api/v1/nodes\": dial tcp 172.24.4.56:6443: connect: connection refused" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.544435 kubelet[1610]: I1002 19:17:28.544372 1610 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:28.547777 kubelet[1610]: I1002 19:17:28.547737 1610 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:28.550723 kubelet[1610]: I1002 19:17:28.550671 1610 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:28.563671 systemd[1]: Created slice kubepods-burstable-pod675fc1ebf5e6c587522078d728b30d2e.slice. Oct 2 19:17:28.578320 systemd[1]: Created slice kubepods-burstable-pod29aca2dcaa8adfa40fcf0175ba99db21.slice. Oct 2 19:17:28.587009 systemd[1]: Created slice kubepods-burstable-pod11d3fa17aad01a174e7109aef99252ba.slice. Oct 2 19:17:28.614392 kubelet[1610]: E1002 19:17:28.614348 1610 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.56:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-9-a7fded3d8e.novalocal?timeout=10s\": dial tcp 172.24.4.56:6443: connect: connection refused" interval="400ms" Oct 2 19:17:28.720005 kubelet[1610]: I1002 19:17:28.713858 1610 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/675fc1ebf5e6c587522078d728b30d2e-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"675fc1ebf5e6c587522078d728b30d2e\") " pod="kube-system/kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.720005 kubelet[1610]: I1002 19:17:28.714030 1610 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.720005 kubelet[1610]: I1002 19:17:28.714120 1610 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.720005 kubelet[1610]: I1002 19:17:28.714187 1610 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.720529 kubelet[1610]: I1002 19:17:28.714248 1610 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/11d3fa17aad01a174e7109aef99252ba-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"11d3fa17aad01a174e7109aef99252ba\") " pod="kube-system/kube-scheduler-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.720529 kubelet[1610]: I1002 19:17:28.714615 1610 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/675fc1ebf5e6c587522078d728b30d2e-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"675fc1ebf5e6c587522078d728b30d2e\") " pod="kube-system/kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.720529 kubelet[1610]: I1002 19:17:28.716378 1610 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/675fc1ebf5e6c587522078d728b30d2e-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"675fc1ebf5e6c587522078d728b30d2e\") " pod="kube-system/kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.720529 kubelet[1610]: I1002 19:17:28.717150 1610 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.720529 kubelet[1610]: I1002 19:17:28.718488 1610 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.723250 kubelet[1610]: I1002 19:17:28.723218 1610 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.723778 kubelet[1610]: E1002 19:17:28.723745 1610 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.56:6443/api/v1/nodes\": dial tcp 172.24.4.56:6443: connect: connection refused" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:28.879839 env[1050]: time="2023-10-02T19:17:28.879719575Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal,Uid:675fc1ebf5e6c587522078d728b30d2e,Namespace:kube-system,Attempt:0,}" Oct 2 19:17:28.887176 env[1050]: time="2023-10-02T19:17:28.886527993Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal,Uid:29aca2dcaa8adfa40fcf0175ba99db21,Namespace:kube-system,Attempt:0,}" Oct 2 19:17:28.893724 env[1050]: time="2023-10-02T19:17:28.893628044Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-9-a7fded3d8e.novalocal,Uid:11d3fa17aad01a174e7109aef99252ba,Namespace:kube-system,Attempt:0,}" Oct 2 19:17:29.015868 kubelet[1610]: E1002 19:17:29.015759 1610 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.56:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-9-a7fded3d8e.novalocal?timeout=10s\": dial tcp 172.24.4.56:6443: connect: connection refused" interval="800ms" Oct 2 19:17:29.127420 kubelet[1610]: I1002 19:17:29.127316 1610 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:29.128906 kubelet[1610]: E1002 19:17:29.128861 1610 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.56:6443/api/v1/nodes\": dial tcp 172.24.4.56:6443: connect: connection refused" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:29.417266 kubelet[1610]: W1002 19:17:29.416705 1610 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.56:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-9-a7fded3d8e.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:29.417266 kubelet[1610]: E1002 19:17:29.416830 1610 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.56:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-9-a7fded3d8e.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:29.463210 kubelet[1610]: W1002 19:17:29.463069 1610 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.56:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:29.463210 kubelet[1610]: E1002 19:17:29.463156 1610 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.56:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:29.485961 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount640077270.mount: Deactivated successfully. Oct 2 19:17:29.498942 env[1050]: time="2023-10-02T19:17:29.498818377Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.505141 env[1050]: time="2023-10-02T19:17:29.505063987Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.507417 env[1050]: time="2023-10-02T19:17:29.507276786Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.511659 env[1050]: time="2023-10-02T19:17:29.511541837Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.514869 env[1050]: time="2023-10-02T19:17:29.514802461Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.533445 env[1050]: time="2023-10-02T19:17:29.533320825Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.540530 env[1050]: time="2023-10-02T19:17:29.540469436Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.542657 env[1050]: time="2023-10-02T19:17:29.542608084Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.544775 env[1050]: time="2023-10-02T19:17:29.544725579Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.546672 env[1050]: time="2023-10-02T19:17:29.546624962Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.548499 env[1050]: time="2023-10-02T19:17:29.548443922Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.551620 kubelet[1610]: W1002 19:17:29.551499 1610 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.56:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:29.551620 kubelet[1610]: E1002 19:17:29.551578 1610 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.56:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:29.555960 env[1050]: time="2023-10-02T19:17:29.555832118Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:29.595664 env[1050]: time="2023-10-02T19:17:29.595496456Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:17:29.595664 env[1050]: time="2023-10-02T19:17:29.595664037Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:17:29.595945 env[1050]: time="2023-10-02T19:17:29.595698186Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:17:29.596134 env[1050]: time="2023-10-02T19:17:29.596033255Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6da35f6936c5a92d4c378326c895a9948c46042b48d8e7a34d54db9c6c0ac038 pid=1652 runtime=io.containerd.runc.v2 Oct 2 19:17:29.610047 env[1050]: time="2023-10-02T19:17:29.609975757Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:17:29.610241 env[1050]: time="2023-10-02T19:17:29.610216986Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:17:29.610376 env[1050]: time="2023-10-02T19:17:29.610352572Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:17:29.610791 env[1050]: time="2023-10-02T19:17:29.610756341Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/68b550003d6886d1b3663dafe096e7e10d26f4f80749481737a185ef92f30815 pid=1667 runtime=io.containerd.runc.v2 Oct 2 19:17:29.628786 systemd[1]: Started cri-containerd-6da35f6936c5a92d4c378326c895a9948c46042b48d8e7a34d54db9c6c0ac038.scope. Oct 2 19:17:29.631328 env[1050]: time="2023-10-02T19:17:29.631230662Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:17:29.633966 env[1050]: time="2023-10-02T19:17:29.633917392Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:17:29.634067 env[1050]: time="2023-10-02T19:17:29.634044630Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:17:29.634346 env[1050]: time="2023-10-02T19:17:29.634304708Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9d44376e1b45cdc152b11a18011e367e7d92f0729d785a17898a9ed3859457c3 pid=1690 runtime=io.containerd.runc.v2 Oct 2 19:17:29.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.653000 audit: BPF prog-id=67 op=LOAD Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1652 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664613335663639333663356139326434633337383332366338393561 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1652 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664613335663639333663356139326434633337383332366338393561 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.656000 audit: BPF prog-id=68 op=LOAD Oct 2 19:17:29.656000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000284c50 items=0 ppid=1652 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664613335663639333663356139326434633337383332366338393561 Oct 2 19:17:29.657000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.657000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.657000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.657000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.657000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.657000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.657000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.657000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.657000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.657000 audit: BPF prog-id=69 op=LOAD Oct 2 19:17:29.657000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000284c98 items=0 ppid=1652 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664613335663639333663356139326434633337383332366338393561 Oct 2 19:17:29.658000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:17:29.658000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { perfmon } for pid=1668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit[1668]: AVC avc: denied { bpf } for pid=1668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.658000 audit: BPF prog-id=70 op=LOAD Oct 2 19:17:29.658000 audit[1668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002850a8 items=0 ppid=1652 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664613335663639333663356139326434633337383332366338393561 Oct 2 19:17:29.664122 systemd[1]: Started cri-containerd-68b550003d6886d1b3663dafe096e7e10d26f4f80749481737a185ef92f30815.scope. Oct 2 19:17:29.682034 systemd[1]: Started cri-containerd-9d44376e1b45cdc152b11a18011e367e7d92f0729d785a17898a9ed3859457c3.scope. Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.704000 audit: BPF prog-id=71 op=LOAD Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1667 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638623535303030336436383836643162333636336461666530393665 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1667 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638623535303030336436383836643162333636336461666530393665 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.708000 audit: BPF prog-id=72 op=LOAD Oct 2 19:17:29.708000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001f6f40 items=0 ppid=1667 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638623535303030336436383836643162333636336461666530393665 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit: BPF prog-id=73 op=LOAD Oct 2 19:17:29.709000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001f6f88 items=0 ppid=1667 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638623535303030336436383836643162333636336461666530393665 Oct 2 19:17:29.709000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:17:29.709000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.709000 audit: BPF prog-id=74 op=LOAD Oct 2 19:17:29.709000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001f7398 items=0 ppid=1667 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638623535303030336436383836643162333636336461666530393665 Oct 2 19:17:29.719414 env[1050]: time="2023-10-02T19:17:29.719320600Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal,Uid:29aca2dcaa8adfa40fcf0175ba99db21,Namespace:kube-system,Attempt:0,} returns sandbox id \"6da35f6936c5a92d4c378326c895a9948c46042b48d8e7a34d54db9c6c0ac038\"" Oct 2 19:17:29.724016 env[1050]: time="2023-10-02T19:17:29.723980652Z" level=info msg="CreateContainer within sandbox \"6da35f6936c5a92d4c378326c895a9948c46042b48d8e7a34d54db9c6c0ac038\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.738000 audit: BPF prog-id=75 op=LOAD Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1690 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343433373665316234356364633135326231316131383031316533 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1690 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343433373665316234356364633135326231316131383031316533 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit: BPF prog-id=76 op=LOAD Oct 2 19:17:29.740000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000330d80 items=0 ppid=1690 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343433373665316234356364633135326231316131383031316533 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit: BPF prog-id=77 op=LOAD Oct 2 19:17:29.740000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000330dc8 items=0 ppid=1690 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343433373665316234356364633135326231316131383031316533 Oct 2 19:17:29.740000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:17:29.740000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.740000 audit: BPF prog-id=78 op=LOAD Oct 2 19:17:29.740000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003311d8 items=0 ppid=1690 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343433373665316234356364633135326231316131383031316533 Oct 2 19:17:29.766837 env[1050]: time="2023-10-02T19:17:29.766760150Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal,Uid:675fc1ebf5e6c587522078d728b30d2e,Namespace:kube-system,Attempt:0,} returns sandbox id \"68b550003d6886d1b3663dafe096e7e10d26f4f80749481737a185ef92f30815\"" Oct 2 19:17:29.770429 env[1050]: time="2023-10-02T19:17:29.770377247Z" level=info msg="CreateContainer within sandbox \"68b550003d6886d1b3663dafe096e7e10d26f4f80749481737a185ef92f30815\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:17:29.788155 env[1050]: time="2023-10-02T19:17:29.788076539Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-9-a7fded3d8e.novalocal,Uid:11d3fa17aad01a174e7109aef99252ba,Namespace:kube-system,Attempt:0,} returns sandbox id \"9d44376e1b45cdc152b11a18011e367e7d92f0729d785a17898a9ed3859457c3\"" Oct 2 19:17:29.790846 env[1050]: time="2023-10-02T19:17:29.790814984Z" level=info msg="CreateContainer within sandbox \"9d44376e1b45cdc152b11a18011e367e7d92f0729d785a17898a9ed3859457c3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:17:29.816942 kubelet[1610]: E1002 19:17:29.816903 1610 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.56:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-9-a7fded3d8e.novalocal?timeout=10s\": dial tcp 172.24.4.56:6443: connect: connection refused" interval="1.6s" Oct 2 19:17:29.820311 kubelet[1610]: W1002 19:17:29.820230 1610 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.56:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:29.820311 kubelet[1610]: E1002 19:17:29.820291 1610 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.56:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:29.849495 env[1050]: time="2023-10-02T19:17:29.849434873Z" level=info msg="CreateContainer within sandbox \"68b550003d6886d1b3663dafe096e7e10d26f4f80749481737a185ef92f30815\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"001cc2cac58c9ed1bfec0e1b12a2556e8c9ed921ea49b27ce15ae5fa822ee051\"" Oct 2 19:17:29.850575 env[1050]: time="2023-10-02T19:17:29.850526246Z" level=info msg="StartContainer for \"001cc2cac58c9ed1bfec0e1b12a2556e8c9ed921ea49b27ce15ae5fa822ee051\"" Oct 2 19:17:29.857624 env[1050]: time="2023-10-02T19:17:29.857553491Z" level=info msg="CreateContainer within sandbox \"9d44376e1b45cdc152b11a18011e367e7d92f0729d785a17898a9ed3859457c3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"42278ce0774188f3452c8f042de938bc0de7b2615eb10d25992d0067381e9745\"" Oct 2 19:17:29.859539 env[1050]: time="2023-10-02T19:17:29.859511322Z" level=info msg="StartContainer for \"42278ce0774188f3452c8f042de938bc0de7b2615eb10d25992d0067381e9745\"" Oct 2 19:17:29.861546 env[1050]: time="2023-10-02T19:17:29.861516440Z" level=info msg="CreateContainer within sandbox \"6da35f6936c5a92d4c378326c895a9948c46042b48d8e7a34d54db9c6c0ac038\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"5a83ad5465d5a437b4dc4dc45b3a661e52ffb5fb9ac7967f226100f2ccb2346b\"" Oct 2 19:17:29.862442 env[1050]: time="2023-10-02T19:17:29.862419321Z" level=info msg="StartContainer for \"5a83ad5465d5a437b4dc4dc45b3a661e52ffb5fb9ac7967f226100f2ccb2346b\"" Oct 2 19:17:29.890003 systemd[1]: Started cri-containerd-001cc2cac58c9ed1bfec0e1b12a2556e8c9ed921ea49b27ce15ae5fa822ee051.scope. Oct 2 19:17:29.900959 systemd[1]: Started cri-containerd-5a83ad5465d5a437b4dc4dc45b3a661e52ffb5fb9ac7967f226100f2ccb2346b.scope. Oct 2 19:17:29.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.928000 audit: BPF prog-id=79 op=LOAD Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1667 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030316363326361633538633965643162666563306531623132613235 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1667 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030316363326361633538633965643162666563306531623132613235 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.930000 audit: BPF prog-id=80 op=LOAD Oct 2 19:17:29.930000 audit[1773]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c18b0 items=0 ppid=1667 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030316363326361633538633965643162666563306531623132613235 Oct 2 19:17:29.931000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.931000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.931000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.931000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.931000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.931000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.931000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.931000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.931000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.931000 audit: BPF prog-id=81 op=LOAD Oct 2 19:17:29.931000 audit[1773]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c18f8 items=0 ppid=1667 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030316363326361633538633965643162666563306531623132613235 Oct 2 19:17:29.932000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:17:29.932000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { perfmon } for pid=1773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit[1773]: AVC avc: denied { bpf } for pid=1773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.932000 audit: BPF prog-id=82 op=LOAD Oct 2 19:17:29.932000 audit[1773]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c1d08 items=0 ppid=1667 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030316363326361633538633965643162666563306531623132613235 Oct 2 19:17:29.938666 kubelet[1610]: I1002 19:17:29.938147 1610 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:29.938666 kubelet[1610]: E1002 19:17:29.938626 1610 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.56:6443/api/v1/nodes\": dial tcp 172.24.4.56:6443: connect: connection refused" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:29.945752 systemd[1]: Started cri-containerd-42278ce0774188f3452c8f042de938bc0de7b2615eb10d25992d0067381e9745.scope. Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.957000 audit: BPF prog-id=83 op=LOAD Oct 2 19:17:29.959000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.959000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1652 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383361643534363564356134333762346463346463343562336136 Oct 2 19:17:29.959000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.959000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1652 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383361643534363564356134333762346463346463343562336136 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.960000 audit: BPF prog-id=84 op=LOAD Oct 2 19:17:29.960000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003cab00 items=0 ppid=1652 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383361643534363564356134333762346463346463343562336136 Oct 2 19:17:29.961000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.961000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.961000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.961000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.961000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.961000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.961000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.961000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.961000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.961000 audit: BPF prog-id=85 op=LOAD Oct 2 19:17:29.961000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003cab48 items=0 ppid=1652 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383361643534363564356134333762346463346463343562336136 Oct 2 19:17:29.963000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:17:29.963000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { perfmon } for pid=1794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit[1794]: AVC avc: denied { bpf } for pid=1794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.963000 audit: BPF prog-id=86 op=LOAD Oct 2 19:17:29.963000 audit[1794]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003caf58 items=0 ppid=1652 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.963000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383361643534363564356134333762346463346463343562336136 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.982000 audit: BPF prog-id=87 op=LOAD Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1690 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432323738636530373734313838663334353263386630343264653933 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1690 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432323738636530373734313838663334353263386630343264653933 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit: BPF prog-id=88 op=LOAD Oct 2 19:17:29.983000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00021a460 items=0 ppid=1690 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432323738636530373734313838663334353263386630343264653933 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit: BPF prog-id=89 op=LOAD Oct 2 19:17:29.983000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00021a4a8 items=0 ppid=1690 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432323738636530373734313838663334353263386630343264653933 Oct 2 19:17:29.983000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:17:29.983000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:29.983000 audit: BPF prog-id=90 op=LOAD Oct 2 19:17:29.983000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00021a8b8 items=0 ppid=1690 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:29.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432323738636530373734313838663334353263386630343264653933 Oct 2 19:17:30.034533 env[1050]: time="2023-10-02T19:17:30.034414479Z" level=info msg="StartContainer for \"5a83ad5465d5a437b4dc4dc45b3a661e52ffb5fb9ac7967f226100f2ccb2346b\" returns successfully" Oct 2 19:17:30.037608 env[1050]: time="2023-10-02T19:17:30.037572846Z" level=info msg="StartContainer for \"001cc2cac58c9ed1bfec0e1b12a2556e8c9ed921ea49b27ce15ae5fa822ee051\" returns successfully" Oct 2 19:17:30.061209 env[1050]: time="2023-10-02T19:17:30.061139809Z" level=info msg="StartContainer for \"42278ce0774188f3452c8f042de938bc0de7b2615eb10d25992d0067381e9745\" returns successfully" Oct 2 19:17:30.403625 kubelet[1610]: E1002 19:17:30.403586 1610 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.56:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.56:6443: connect: connection refused Oct 2 19:17:31.361000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:31.361000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0008606f0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:31.361000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:31.364000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:31.364000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000eb0040 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:31.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:31.542458 kubelet[1610]: I1002 19:17:31.542421 1610 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:33.202362 kernel: kauditd_printk_skb: 629 callbacks suppressed Oct 2 19:17:33.202619 kernel: audit: type=1400 audit(1696274253.196:664): avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.196000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.198000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.226296 kernel: audit: type=1400 audit(1696274253.198:665): avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.198000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00367da70 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:17:33.198000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:17:33.253190 kernel: audit: type=1300 audit(1696274253.198:665): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00367da70 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:17:33.253283 kernel: audit: type=1327 audit(1696274253.198:665): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:17:33.196000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0036d2000 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:17:33.269418 kernel: audit: type=1300 audit(1696274253.196:664): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0036d2000 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:17:33.196000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:17:33.284413 kernel: audit: type=1327 audit(1696274253.196:664): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:17:33.199000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.199000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c009ffa240 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:17:33.296478 kernel: audit: type=1400 audit(1696274253.199:666): avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.296526 kernel: audit: type=1300 audit(1696274253.199:666): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c009ffa240 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:17:33.199000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:17:33.205000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.313206 kernel: audit: type=1327 audit(1696274253.199:666): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:17:33.313286 kernel: audit: type=1400 audit(1696274253.205:667): avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.205000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5a a1=c0036d37d0 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:17:33.205000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:17:33.217000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.217000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00237cb00 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:17:33.217000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:17:33.220000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:33.220000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00373a630 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:17:33.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:17:33.493337 kubelet[1610]: E1002 19:17:33.493167 1610 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510-3-0-9-a7fded3d8e.novalocal\" not found" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:33.574445 kubelet[1610]: I1002 19:17:33.574352 1610 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:34.405237 kubelet[1610]: I1002 19:17:34.405177 1610 apiserver.go:52] "Watching apiserver" Oct 2 19:17:34.412567 kubelet[1610]: I1002 19:17:34.412513 1610 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:17:34.453021 kubelet[1610]: I1002 19:17:34.452989 1610 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:17:36.152488 systemd[1]: Reloading. Oct 2 19:17:36.197509 kubelet[1610]: W1002 19:17:36.197465 1610 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:17:36.273083 /usr/lib/systemd/system-generators/torcx-generator[1894]: time="2023-10-02T19:17:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:17:36.281365 /usr/lib/systemd/system-generators/torcx-generator[1894]: time="2023-10-02T19:17:36Z" level=info msg="torcx already run" Oct 2 19:17:36.373363 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:17:36.373401 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:17:36.401311 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:17:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit: BPF prog-id=91 op=LOAD Oct 2 19:17:36.480000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit: BPF prog-id=92 op=LOAD Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.480000 audit: BPF prog-id=93 op=LOAD Oct 2 19:17:36.480000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:17:36.480000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit: BPF prog-id=94 op=LOAD Oct 2 19:17:36.482000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.483000 audit: BPF prog-id=95 op=LOAD Oct 2 19:17:36.483000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.485000 audit: BPF prog-id=96 op=LOAD Oct 2 19:17:36.485000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.486000 audit: BPF prog-id=97 op=LOAD Oct 2 19:17:36.486000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.488000 audit: BPF prog-id=98 op=LOAD Oct 2 19:17:36.489000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit: BPF prog-id=99 op=LOAD Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit: BPF prog-id=100 op=LOAD Oct 2 19:17:36.489000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:17:36.489000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.489000 audit: BPF prog-id=101 op=LOAD Oct 2 19:17:36.489000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.490000 audit: BPF prog-id=102 op=LOAD Oct 2 19:17:36.490000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.491000 audit: BPF prog-id=103 op=LOAD Oct 2 19:17:36.491000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.492000 audit: BPF prog-id=104 op=LOAD Oct 2 19:17:36.492000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit: BPF prog-id=105 op=LOAD Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.495000 audit: BPF prog-id=106 op=LOAD Oct 2 19:17:36.495000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:17:36.495000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.496000 audit: BPF prog-id=107 op=LOAD Oct 2 19:17:36.496000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit: BPF prog-id=108 op=LOAD Oct 2 19:17:36.497000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit: BPF prog-id=109 op=LOAD Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.497000 audit: BPF prog-id=110 op=LOAD Oct 2 19:17:36.497000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:17:36.497000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.499000 audit: BPF prog-id=111 op=LOAD Oct 2 19:17:36.499000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:17:36.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:36.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:36.548786 kubelet[1610]: I1002 19:17:36.513230 1610 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:17:36.513575 systemd[1]: Stopping kubelet.service... Oct 2 19:17:36.532899 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:17:36.533096 systemd[1]: Stopped kubelet.service. Oct 2 19:17:36.535289 systemd[1]: Started kubelet.service. Oct 2 19:17:36.689245 kubelet[1941]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:17:36.692780 kubelet[1941]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:17:36.692843 kubelet[1941]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:17:36.693018 kubelet[1941]: I1002 19:17:36.692980 1941 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:17:36.701067 kubelet[1941]: I1002 19:17:36.701025 1941 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:17:36.701067 kubelet[1941]: I1002 19:17:36.701066 1941 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:17:36.701356 kubelet[1941]: I1002 19:17:36.701323 1941 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:17:36.703230 kubelet[1941]: I1002 19:17:36.703210 1941 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:17:36.708430 kubelet[1941]: I1002 19:17:36.706839 1941 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:17:36.708430 kubelet[1941]: I1002 19:17:36.707037 1941 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:17:36.708430 kubelet[1941]: I1002 19:17:36.707111 1941 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:17:36.708430 kubelet[1941]: I1002 19:17:36.707129 1941 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:17:36.708430 kubelet[1941]: I1002 19:17:36.707142 1941 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:17:36.708430 kubelet[1941]: I1002 19:17:36.707171 1941 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:17:36.709636 kubelet[1941]: I1002 19:17:36.708707 1941 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:17:36.725473 kubelet[1941]: I1002 19:17:36.722339 1941 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:17:36.725473 kubelet[1941]: I1002 19:17:36.722371 1941 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:17:36.725473 kubelet[1941]: I1002 19:17:36.722416 1941 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:17:36.725473 kubelet[1941]: I1002 19:17:36.722436 1941 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:17:36.727744 kubelet[1941]: I1002 19:17:36.727708 1941 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:17:36.729607 kubelet[1941]: I1002 19:17:36.728558 1941 server.go:1168] "Started kubelet" Oct 2 19:17:36.735151 kubelet[1941]: I1002 19:17:36.735056 1941 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:17:36.741417 kubelet[1941]: I1002 19:17:36.741359 1941 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:17:36.743411 kubelet[1941]: I1002 19:17:36.743103 1941 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:17:36.746000 audit[1941]: AVC avc: denied { mac_admin } for pid=1941 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.746000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:17:36.746000 audit[1941]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000920030 a1=c0006c38a8 a2=c000920000 a3=25 items=0 ppid=1 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:36.746000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:17:36.749221 kubelet[1941]: I1002 19:17:36.749203 1941 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:17:36.748000 audit[1941]: AVC avc: denied { mac_admin } for pid=1941 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.748000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:17:36.748000 audit[1941]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000510de0 a1=c0006c38c0 a2=c0009200c0 a3=25 items=0 ppid=1 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:36.748000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:17:36.749964 kubelet[1941]: I1002 19:17:36.749949 1941 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:17:36.750073 kubelet[1941]: I1002 19:17:36.750062 1941 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:17:36.757686 kubelet[1941]: E1002 19:17:36.755530 1941 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:17:36.757686 kubelet[1941]: E1002 19:17:36.755573 1941 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:17:36.768096 kubelet[1941]: I1002 19:17:36.768067 1941 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:17:36.771992 kubelet[1941]: I1002 19:17:36.771975 1941 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:17:36.780326 kubelet[1941]: I1002 19:17:36.780300 1941 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:17:36.784832 kubelet[1941]: I1002 19:17:36.784802 1941 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:17:36.785028 kubelet[1941]: I1002 19:17:36.785015 1941 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:17:36.785144 kubelet[1941]: I1002 19:17:36.785132 1941 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:17:36.785260 kubelet[1941]: E1002 19:17:36.785249 1941 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:17:36.855689 kubelet[1941]: I1002 19:17:36.855649 1941 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:17:36.855689 kubelet[1941]: I1002 19:17:36.855676 1941 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:17:36.855689 kubelet[1941]: I1002 19:17:36.855693 1941 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:17:36.856429 kubelet[1941]: I1002 19:17:36.856408 1941 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:17:36.856429 kubelet[1941]: I1002 19:17:36.856429 1941 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:17:36.856519 kubelet[1941]: I1002 19:17:36.856437 1941 policy_none.go:49] "None policy: Start" Oct 2 19:17:36.857156 kubelet[1941]: I1002 19:17:36.857134 1941 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:17:36.857156 kubelet[1941]: I1002 19:17:36.857157 1941 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:17:36.857778 kubelet[1941]: I1002 19:17:36.857750 1941 state_mem.go:75] "Updated machine memory state" Oct 2 19:17:36.862841 kubelet[1941]: I1002 19:17:36.861585 1941 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:17:36.862000 audit[1941]: AVC avc: denied { mac_admin } for pid=1941 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:36.862000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:17:36.862000 audit[1941]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001241b90 a1=c0006c3998 a2=c001241b60 a3=25 items=0 ppid=1 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:36.862000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:17:36.865035 kubelet[1941]: I1002 19:17:36.864933 1941 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:17:36.867278 kubelet[1941]: I1002 19:17:36.867259 1941 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:17:36.876346 kubelet[1941]: I1002 19:17:36.876311 1941 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:36.885813 kubelet[1941]: I1002 19:17:36.885789 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:36.888525 kubelet[1941]: I1002 19:17:36.888511 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:36.888666 kubelet[1941]: I1002 19:17:36.888654 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:36.897925 kubelet[1941]: I1002 19:17:36.897895 1941 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:36.898185 kubelet[1941]: I1002 19:17:36.898174 1941 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:36.905656 kubelet[1941]: W1002 19:17:36.905633 1941 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:17:36.910762 kubelet[1941]: W1002 19:17:36.910735 1941 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:17:36.918415 kubelet[1941]: W1002 19:17:36.918356 1941 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:17:36.918685 kubelet[1941]: E1002 19:17:36.918673 1941 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.074365 kubelet[1941]: I1002 19:17:37.074325 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/675fc1ebf5e6c587522078d728b30d2e-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"675fc1ebf5e6c587522078d728b30d2e\") " pod="kube-system/kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.074651 kubelet[1941]: I1002 19:17:37.074639 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.074783 kubelet[1941]: I1002 19:17:37.074773 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.074941 kubelet[1941]: I1002 19:17:37.074917 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/11d3fa17aad01a174e7109aef99252ba-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"11d3fa17aad01a174e7109aef99252ba\") " pod="kube-system/kube-scheduler-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.075056 kubelet[1941]: I1002 19:17:37.075046 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/675fc1ebf5e6c587522078d728b30d2e-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"675fc1ebf5e6c587522078d728b30d2e\") " pod="kube-system/kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.075180 kubelet[1941]: I1002 19:17:37.075171 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.075305 kubelet[1941]: I1002 19:17:37.075292 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.075473 kubelet[1941]: I1002 19:17:37.075438 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/29aca2dcaa8adfa40fcf0175ba99db21-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"29aca2dcaa8adfa40fcf0175ba99db21\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.075600 kubelet[1941]: I1002 19:17:37.075590 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/675fc1ebf5e6c587522078d728b30d2e-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal\" (UID: \"675fc1ebf5e6c587522078d728b30d2e\") " pod="kube-system/kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.727223 kubelet[1941]: I1002 19:17:37.727173 1941 apiserver.go:52] "Watching apiserver" Oct 2 19:17:37.778202 kubelet[1941]: I1002 19:17:37.778130 1941 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:17:37.780553 kubelet[1941]: I1002 19:17:37.780509 1941 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:17:37.836969 kubelet[1941]: W1002 19:17:37.836919 1941 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:17:37.837200 kubelet[1941]: E1002 19:17:37.837024 1941 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:17:37.896589 kubelet[1941]: I1002 19:17:37.896538 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510-3-0-9-a7fded3d8e.novalocal" podStartSLOduration=1.895453329 podCreationTimestamp="2023-10-02 19:17:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:17:37.872498469 +0000 UTC m=+1.310374372" watchObservedRunningTime="2023-10-02 19:17:37.895453329 +0000 UTC m=+1.333329242" Oct 2 19:17:37.916929 kubelet[1941]: I1002 19:17:37.916869 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510-3-0-9-a7fded3d8e.novalocal" podStartSLOduration=1.916796607 podCreationTimestamp="2023-10-02 19:17:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:17:37.897694632 +0000 UTC m=+1.335570535" watchObservedRunningTime="2023-10-02 19:17:37.916796607 +0000 UTC m=+1.354672510" Oct 2 19:17:37.942891 kubelet[1941]: I1002 19:17:37.942800 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510-3-0-9-a7fded3d8e.novalocal" podStartSLOduration=1.942725906 podCreationTimestamp="2023-10-02 19:17:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:17:37.920929949 +0000 UTC m=+1.358805852" watchObservedRunningTime="2023-10-02 19:17:37.942725906 +0000 UTC m=+1.380601839" Oct 2 19:17:38.279413 kernel: kauditd_printk_skb: 266 callbacks suppressed Oct 2 19:17:38.279590 kernel: audit: type=1400 audit(1696274258.277:919): avc: denied { watch } for pid=1822 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525398 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:17:38.277000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525398 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:17:38.277000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000fffe80 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:38.277000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.298231 kernel: audit: type=1300 audit(1696274258.277:919): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000fffe80 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:38.298446 kernel: audit: type=1327 audit(1696274258.277:919): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.602000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.602000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c4cfe0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:38.613225 kernel: audit: type=1400 audit(1696274258.602:920): avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.613322 kernel: audit: type=1300 audit(1696274258.602:920): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c4cfe0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:38.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.621421 kernel: audit: type=1327 audit(1696274258.602:920): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.619000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.627417 kernel: audit: type=1400 audit(1696274258.619:921): avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.619000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c4d120 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:38.619000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.639815 kernel: audit: type=1300 audit(1696274258.619:921): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c4d120 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:38.639926 kernel: audit: type=1327 audit(1696274258.619:921): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.625000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.625000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d924c0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:38.625000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.634000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.634000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c4d520 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:17:38.634000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.646420 kernel: audit: type=1400 audit(1696274258.625:922): avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:41.429254 sudo[1192]: pam_unix(sudo:session): session closed for user root Oct 2 19:17:41.427000 audit[1192]: USER_END pid=1192 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:17:41.428000 audit[1192]: CRED_DISP pid=1192 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:17:41.595892 sshd[1188]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:41.598000 audit[1188]: USER_END pid=1188 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:17:41.598000 audit[1188]: CRED_DISP pid=1188 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:17:41.613135 systemd[1]: sshd@6-172.24.4.56:22-172.24.4.1:42640.service: Deactivated successfully. Oct 2 19:17:41.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.56:22-172.24.4.1:42640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:41.615448 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:17:41.615976 systemd[1]: session-7.scope: Consumed 6.424s CPU time. Oct 2 19:17:41.617178 systemd-logind[1044]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:17:41.620921 systemd-logind[1044]: Removed session 7. Oct 2 19:17:52.215707 kubelet[1941]: I1002 19:17:52.215673 1941 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:17:52.216844 env[1050]: time="2023-10-02T19:17:52.216785835Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:17:52.217152 kubelet[1941]: I1002 19:17:52.217065 1941 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:17:52.366832 kubelet[1941]: I1002 19:17:52.366784 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:52.373077 systemd[1]: Created slice kubepods-besteffort-pod919c97d1_0320_4735_8129_c0785d8b6d7f.slice. Oct 2 19:17:52.480142 kubelet[1941]: I1002 19:17:52.480006 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/919c97d1-0320-4735-8129-c0785d8b6d7f-lib-modules\") pod \"kube-proxy-nxrxw\" (UID: \"919c97d1-0320-4735-8129-c0785d8b6d7f\") " pod="kube-system/kube-proxy-nxrxw" Oct 2 19:17:52.480142 kubelet[1941]: I1002 19:17:52.480073 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/919c97d1-0320-4735-8129-c0785d8b6d7f-kube-proxy\") pod \"kube-proxy-nxrxw\" (UID: \"919c97d1-0320-4735-8129-c0785d8b6d7f\") " pod="kube-system/kube-proxy-nxrxw" Oct 2 19:17:52.480142 kubelet[1941]: I1002 19:17:52.480102 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/919c97d1-0320-4735-8129-c0785d8b6d7f-xtables-lock\") pod \"kube-proxy-nxrxw\" (UID: \"919c97d1-0320-4735-8129-c0785d8b6d7f\") " pod="kube-system/kube-proxy-nxrxw" Oct 2 19:17:52.480142 kubelet[1941]: I1002 19:17:52.480139 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kkj75\" (UniqueName: \"kubernetes.io/projected/919c97d1-0320-4735-8129-c0785d8b6d7f-kube-api-access-kkj75\") pod \"kube-proxy-nxrxw\" (UID: \"919c97d1-0320-4735-8129-c0785d8b6d7f\") " pod="kube-system/kube-proxy-nxrxw" Oct 2 19:17:52.522128 kubelet[1941]: I1002 19:17:52.522087 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:52.532187 systemd[1]: Created slice kubepods-besteffort-pod9057d06a_ade0_40ed_a9be_a8abdc009f74.slice. Oct 2 19:17:52.581435 kubelet[1941]: I1002 19:17:52.581396 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9w97q\" (UniqueName: \"kubernetes.io/projected/9057d06a-ade0-40ed-a9be-a8abdc009f74-kube-api-access-9w97q\") pod \"tigera-operator-59c686f986-9p9t7\" (UID: \"9057d06a-ade0-40ed-a9be-a8abdc009f74\") " pod="tigera-operator/tigera-operator-59c686f986-9p9t7" Oct 2 19:17:52.581824 kubelet[1941]: I1002 19:17:52.581802 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9057d06a-ade0-40ed-a9be-a8abdc009f74-var-lib-calico\") pod \"tigera-operator-59c686f986-9p9t7\" (UID: \"9057d06a-ade0-40ed-a9be-a8abdc009f74\") " pod="tigera-operator/tigera-operator-59c686f986-9p9t7" Oct 2 19:17:52.684794 env[1050]: time="2023-10-02T19:17:52.684638566Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nxrxw,Uid:919c97d1-0320-4735-8129-c0785d8b6d7f,Namespace:kube-system,Attempt:0,}" Oct 2 19:17:52.750055 env[1050]: time="2023-10-02T19:17:52.738075634Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:17:52.750055 env[1050]: time="2023-10-02T19:17:52.738273850Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:17:52.750055 env[1050]: time="2023-10-02T19:17:52.738377031Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:17:52.750055 env[1050]: time="2023-10-02T19:17:52.738757723Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4f72e46813d7861d266cd394b5e2798e067a9fab3d9f51f0b01de191516385a9 pid=2025 runtime=io.containerd.runc.v2 Oct 2 19:17:52.768079 systemd[1]: Started cri-containerd-4f72e46813d7861d266cd394b5e2798e067a9fab3d9f51f0b01de191516385a9.scope. Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.792253 kernel: kauditd_printk_skb: 10 callbacks suppressed Oct 2 19:17:52.792331 kernel: audit: type=1400 audit(1696274272.789:929): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.799317 kernel: audit: type=1400 audit(1696274272.789:930): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.799434 kernel: audit: type=1400 audit(1696274272.789:931): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.806237 kernel: audit: type=1400 audit(1696274272.789:932): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.806293 kernel: audit: type=1400 audit(1696274272.789:933): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.818263 kernel: audit: type=1400 audit(1696274272.789:934): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.818328 kernel: audit: type=1400 audit(1696274272.789:935): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.821081 kernel: audit: type=1400 audit(1696274272.789:936): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.832572 kernel: audit: type=1400 audit(1696274272.789:937): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.832631 kernel: audit: type=1400 audit(1696274272.789:938): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.789000 audit: BPF prog-id=112 op=LOAD Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2025 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373265343638313364373836316432363663643339346235653237 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2025 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373265343638313364373836316432363663643339346235653237 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.795000 audit: BPF prog-id=113 op=LOAD Oct 2 19:17:52.795000 audit[2037]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028ac20 items=0 ppid=2025 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373265343638313364373836316432363663643339346235653237 Oct 2 19:17:52.802000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.802000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.802000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.802000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.802000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.802000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.802000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.802000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.802000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.802000 audit: BPF prog-id=114 op=LOAD Oct 2 19:17:52.802000 audit[2037]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028ac68 items=0 ppid=2025 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373265343638313364373836316432363663643339346235653237 Oct 2 19:17:52.815000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:17:52.815000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.815000 audit: BPF prog-id=115 op=LOAD Oct 2 19:17:52.815000 audit[2037]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00028b078 items=0 ppid=2025 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466373265343638313364373836316432363663643339346235653237 Oct 2 19:17:52.836769 env[1050]: time="2023-10-02T19:17:52.836719341Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-59c686f986-9p9t7,Uid:9057d06a-ade0-40ed-a9be-a8abdc009f74,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:17:52.858541 env[1050]: time="2023-10-02T19:17:52.858504175Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nxrxw,Uid:919c97d1-0320-4735-8129-c0785d8b6d7f,Namespace:kube-system,Attempt:0,} returns sandbox id \"4f72e46813d7861d266cd394b5e2798e067a9fab3d9f51f0b01de191516385a9\"" Oct 2 19:17:52.864787 env[1050]: time="2023-10-02T19:17:52.864748734Z" level=info msg="CreateContainer within sandbox \"4f72e46813d7861d266cd394b5e2798e067a9fab3d9f51f0b01de191516385a9\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:17:52.883041 env[1050]: time="2023-10-02T19:17:52.882942760Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:17:52.883228 env[1050]: time="2023-10-02T19:17:52.883022215Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:17:52.883228 env[1050]: time="2023-10-02T19:17:52.883065750Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:17:52.883412 env[1050]: time="2023-10-02T19:17:52.883349633Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fd174bb6293ffdcddef559dcd5c4a4a05f6a69082279e7b43239ff9ecf60e8ba pid=2070 runtime=io.containerd.runc.v2 Oct 2 19:17:52.896175 systemd[1]: Started cri-containerd-fd174bb6293ffdcddef559dcd5c4a4a05f6a69082279e7b43239ff9ecf60e8ba.scope. Oct 2 19:17:52.905889 env[1050]: time="2023-10-02T19:17:52.905847868Z" level=info msg="CreateContainer within sandbox \"4f72e46813d7861d266cd394b5e2798e067a9fab3d9f51f0b01de191516385a9\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"8082fcd4abeb400698c6211aed338c2905434b1410ceefa9d538508c74ac0ee4\"" Oct 2 19:17:52.906973 env[1050]: time="2023-10-02T19:17:52.906919476Z" level=info msg="StartContainer for \"8082fcd4abeb400698c6211aed338c2905434b1410ceefa9d538508c74ac0ee4\"" Oct 2 19:17:52.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.913000 audit: BPF prog-id=116 op=LOAD Oct 2 19:17:52.915000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.915000 audit[2081]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2070 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664313734626236323933666664636464656635353964636435633461 Oct 2 19:17:52.915000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.915000 audit[2081]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2070 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664313734626236323933666664636464656635353964636435633461 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.916000 audit: BPF prog-id=117 op=LOAD Oct 2 19:17:52.916000 audit[2081]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021e160 items=0 ppid=2070 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664313734626236323933666664636464656635353964636435633461 Oct 2 19:17:52.917000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.917000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.917000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.917000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.917000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.917000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.917000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.917000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.917000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.917000 audit: BPF prog-id=118 op=LOAD Oct 2 19:17:52.917000 audit[2081]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021e1a8 items=0 ppid=2070 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664313734626236323933666664636464656635353964636435633461 Oct 2 19:17:52.919000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:17:52.919000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { perfmon } for pid=2081 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit[2081]: AVC avc: denied { bpf } for pid=2081 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.919000 audit: BPF prog-id=119 op=LOAD Oct 2 19:17:52.919000 audit[2081]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021e5b8 items=0 ppid=2070 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664313734626236323933666664636464656635353964636435633461 Oct 2 19:17:52.955643 systemd[1]: Started cri-containerd-8082fcd4abeb400698c6211aed338c2905434b1410ceefa9d538508c74ac0ee4.scope. Oct 2 19:17:52.963746 env[1050]: time="2023-10-02T19:17:52.963690191Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-59c686f986-9p9t7,Uid:9057d06a-ade0-40ed-a9be-a8abdc009f74,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"fd174bb6293ffdcddef559dcd5c4a4a05f6a69082279e7b43239ff9ecf60e8ba\"" Oct 2 19:17:52.970012 env[1050]: time="2023-10-02T19:17:52.969962966Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:17:52.983000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.983000 audit[2104]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2025 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383266636434616265623430303639386336323131616564333338 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.984000 audit: BPF prog-id=120 op=LOAD Oct 2 19:17:52.984000 audit[2104]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003ec360 items=0 ppid=2025 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383266636434616265623430303639386336323131616564333338 Oct 2 19:17:52.985000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.985000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.985000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.985000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.985000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.985000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.985000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.985000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.985000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.985000 audit: BPF prog-id=121 op=LOAD Oct 2 19:17:52.985000 audit[2104]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003ec3a8 items=0 ppid=2025 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383266636434616265623430303639386336323131616564333338 Oct 2 19:17:52.986000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:17:52.986000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { perfmon } for pid=2104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit[2104]: AVC avc: denied { bpf } for pid=2104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:52.986000 audit: BPF prog-id=122 op=LOAD Oct 2 19:17:52.986000 audit[2104]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003ec438 items=0 ppid=2025 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:52.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830383266636434616265623430303639386336323131616564333338 Oct 2 19:17:53.014953 env[1050]: time="2023-10-02T19:17:53.014913124Z" level=info msg="StartContainer for \"8082fcd4abeb400698c6211aed338c2905434b1410ceefa9d538508c74ac0ee4\" returns successfully" Oct 2 19:17:53.587000 audit[2161]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.587000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcef46ea20 a2=0 a3=7ffcef46ea0c items=0 ppid=2123 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.587000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:17:53.602000 audit[2162]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:53.602000 audit[2162]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc838fae70 a2=0 a3=7ffc838fae5c items=0 ppid=2123 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.602000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:17:53.606043 systemd[1]: run-containerd-runc-k8s.io-4f72e46813d7861d266cd394b5e2798e067a9fab3d9f51f0b01de191516385a9-runc.P80xCy.mount: Deactivated successfully. Oct 2 19:17:53.607000 audit[2164]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:53.607000 audit[2164]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff93ff25c0 a2=0 a3=7fff93ff25ac items=0 ppid=2123 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.607000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:17:53.615000 audit[2163]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.615000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc8bd1adc0 a2=0 a3=7ffc8bd1adac items=0 ppid=2123 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.615000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:17:53.620000 audit[2165]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2165 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:53.620000 audit[2165]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd12c51420 a2=0 a3=7ffd12c5140c items=0 ppid=2123 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.620000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:17:53.630000 audit[2168]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.630000 audit[2168]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff096dc330 a2=0 a3=7fff096dc31c items=0 ppid=2123 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.630000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:17:53.729000 audit[2169]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.729000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe58c76fc0 a2=0 a3=7ffe58c76fac items=0 ppid=2123 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.729000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:17:53.738000 audit[2171]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.738000 audit[2171]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffff89c8500 a2=0 a3=7ffff89c84ec items=0 ppid=2123 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.738000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:17:53.751000 audit[2174]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.751000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe19d8f610 a2=0 a3=7ffe19d8f5fc items=0 ppid=2123 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.751000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:17:53.755000 audit[2175]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.755000 audit[2175]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd362bce50 a2=0 a3=7ffd362bce3c items=0 ppid=2123 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.755000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:17:53.766000 audit[2177]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.766000 audit[2177]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc206b2390 a2=0 a3=7ffc206b237c items=0 ppid=2123 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.766000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:17:53.771000 audit[2178]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.771000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff511151f0 a2=0 a3=7fff511151dc items=0 ppid=2123 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:17:53.780000 audit[2180]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.780000 audit[2180]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd008cd770 a2=0 a3=7ffd008cd75c items=0 ppid=2123 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.780000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:17:53.790000 audit[2183]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.790000 audit[2183]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd16ec3e60 a2=0 a3=7ffd16ec3e4c items=0 ppid=2123 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.790000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:17:53.793000 audit[2184]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.793000 audit[2184]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeeb498340 a2=0 a3=7ffeeb49832c items=0 ppid=2123 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.793000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:17:53.799000 audit[2186]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.799000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc5bfdd510 a2=0 a3=7ffc5bfdd4fc items=0 ppid=2123 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.799000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:17:53.802000 audit[2187]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.802000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8d2b5bb0 a2=0 a3=7ffe8d2b5b9c items=0 ppid=2123 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.802000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:17:53.808000 audit[2189]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.808000 audit[2189]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe9ff67450 a2=0 a3=7ffe9ff6743c items=0 ppid=2123 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.808000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:17:53.822000 audit[2192]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.822000 audit[2192]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd99231fc0 a2=0 a3=7ffd99231fac items=0 ppid=2123 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.822000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:17:53.832000 audit[2195]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.832000 audit[2195]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe47e5c7c0 a2=0 a3=7ffe47e5c7ac items=0 ppid=2123 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.832000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:17:53.835000 audit[2196]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.835000 audit[2196]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffeda8422f0 a2=0 a3=7ffeda8422dc items=0 ppid=2123 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.835000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:17:53.842000 audit[2198]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.842000 audit[2198]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc3de8a850 a2=0 a3=7ffc3de8a83c items=0 ppid=2123 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.842000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:17:53.862000 audit[2201]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.862000 audit[2201]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdee54a500 a2=0 a3=7ffdee54a4ec items=0 ppid=2123 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.862000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:17:53.907000 audit[2206]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.907000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe43ee90c0 a2=0 a3=7ffe43ee90ac items=0 ppid=2123 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:17:53.911000 audit[2208]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:17:53.911000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc4e836e90 a2=0 a3=7ffc4e836e7c items=0 ppid=2123 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.911000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:17:53.956000 audit[2210]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:53.956000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffece8e1860 a2=0 a3=7ffece8e184c items=0 ppid=2123 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.956000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:53.970000 audit[2210]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:53.970000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffece8e1860 a2=0 a3=7ffece8e184c items=0 ppid=2123 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.970000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:53.974000 audit[2215]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:53.974000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd53873e80 a2=0 a3=7ffd53873e6c items=0 ppid=2123 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.974000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:17:53.979000 audit[2217]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:53.979000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc3966fa70 a2=0 a3=7ffc3966fa5c items=0 ppid=2123 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.979000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:17:53.986000 audit[2220]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:53.986000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffca59a6a10 a2=0 a3=7ffca59a69fc items=0 ppid=2123 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.986000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:17:53.989000 audit[2221]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:53.989000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff1642970 a2=0 a3=7ffff164295c items=0 ppid=2123 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.989000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:17:53.995000 audit[2223]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:53.995000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd60d67590 a2=0 a3=7ffd60d6757c items=0 ppid=2123 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.995000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:17:53.997000 audit[2224]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:53.997000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe4d56b030 a2=0 a3=7ffe4d56b01c items=0 ppid=2123 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.997000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:17:54.001000 audit[2226]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.001000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcb2fa3800 a2=0 a3=7ffcb2fa37ec items=0 ppid=2123 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.001000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:17:54.006000 audit[2229]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.006000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffea86d5b10 a2=0 a3=7ffea86d5afc items=0 ppid=2123 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.006000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:17:54.008000 audit[2230]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.008000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd70f04b50 a2=0 a3=7ffd70f04b3c items=0 ppid=2123 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.008000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:17:54.013000 audit[2232]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.013000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe78f37f60 a2=0 a3=7ffe78f37f4c items=0 ppid=2123 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.013000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:17:54.015000 audit[2233]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.015000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd8d699d00 a2=0 a3=7ffd8d699cec items=0 ppid=2123 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.015000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:17:54.019000 audit[2235]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.019000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd655ecc10 a2=0 a3=7ffd655ecbfc items=0 ppid=2123 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:17:54.030000 audit[2238]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.030000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe0341ef80 a2=0 a3=7ffe0341ef6c items=0 ppid=2123 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.030000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:17:54.037000 audit[2241]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.037000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe85187500 a2=0 a3=7ffe851874ec items=0 ppid=2123 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.037000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:17:54.039000 audit[2242]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.039000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff0d054b80 a2=0 a3=7fff0d054b6c items=0 ppid=2123 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.039000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:17:54.043000 audit[2244]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.043000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd8c0b96d0 a2=0 a3=7ffd8c0b96bc items=0 ppid=2123 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.043000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:17:54.055000 audit[2247]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.055000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd432fc070 a2=0 a3=7ffd432fc05c items=0 ppid=2123 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.055000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:17:54.062000 audit[2248]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.062000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9338be80 a2=0 a3=7fff9338be6c items=0 ppid=2123 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.062000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:17:54.064000 audit[2250]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2250 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.064000 audit[2250]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc2762f300 a2=0 a3=7ffc2762f2ec items=0 ppid=2123 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.064000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:17:54.069000 audit[2253]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.069000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdb466edd0 a2=0 a3=7ffdb466edbc items=0 ppid=2123 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.069000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:17:54.070000 audit[2254]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.070000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff89cd1030 a2=0 a3=7fff89cd101c items=0 ppid=2123 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.070000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:17:54.072000 audit[2256]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:17:54.072000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc8537d350 a2=0 a3=7ffc8537d33c items=0 ppid=2123 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.072000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:17:54.075000 audit[2258]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:17:54.075000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffe06776060 a2=0 a3=7ffe0677604c items=0 ppid=2123 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.075000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:54.076000 audit[2258]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:17:54.076000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffe06776060 a2=0 a3=7ffe0677604c items=0 ppid=2123 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:54.076000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:54.394529 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1323321785.mount: Deactivated successfully. Oct 2 19:17:55.955212 env[1050]: time="2023-10-02T19:17:55.955103373Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:55.959020 env[1050]: time="2023-10-02T19:17:55.958966826Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:55.964734 env[1050]: time="2023-10-02T19:17:55.964634208Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:55.971446 env[1050]: time="2023-10-02T19:17:55.971284070Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:17:55.973940 env[1050]: time="2023-10-02T19:17:55.973882212Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1\"" Oct 2 19:17:55.985003 env[1050]: time="2023-10-02T19:17:55.984934966Z" level=info msg="CreateContainer within sandbox \"fd174bb6293ffdcddef559dcd5c4a4a05f6a69082279e7b43239ff9ecf60e8ba\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:17:56.014594 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1469142182.mount: Deactivated successfully. Oct 2 19:17:56.022587 env[1050]: time="2023-10-02T19:17:56.022497077Z" level=info msg="CreateContainer within sandbox \"fd174bb6293ffdcddef559dcd5c4a4a05f6a69082279e7b43239ff9ecf60e8ba\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"59b4f7307c8a34d705cb7de2acba384eb38e4eb0502cdf4677c5f0fc9369d51c\"" Oct 2 19:17:56.027310 env[1050]: time="2023-10-02T19:17:56.027151212Z" level=info msg="StartContainer for \"59b4f7307c8a34d705cb7de2acba384eb38e4eb0502cdf4677c5f0fc9369d51c\"" Oct 2 19:17:56.062902 systemd[1]: Started cri-containerd-59b4f7307c8a34d705cb7de2acba384eb38e4eb0502cdf4677c5f0fc9369d51c.scope. Oct 2 19:17:56.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.086000 audit: BPF prog-id=123 op=LOAD Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2070 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:56.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539623466373330376338613334643730356362376465326163626133 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2070 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:56.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539623466373330376338613334643730356362376465326163626133 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.087000 audit: BPF prog-id=124 op=LOAD Oct 2 19:17:56.087000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002167e0 items=0 ppid=2070 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:56.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539623466373330376338613334643730356362376465326163626133 Oct 2 19:17:56.088000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.088000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.088000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.088000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.088000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.088000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.088000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.088000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.088000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.088000 audit: BPF prog-id=125 op=LOAD Oct 2 19:17:56.088000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000216828 items=0 ppid=2070 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:56.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539623466373330376338613334643730356362376465326163626133 Oct 2 19:17:56.088000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:17:56.089000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:56.089000 audit: BPF prog-id=126 op=LOAD Oct 2 19:17:56.089000 audit[2266]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000216c38 items=0 ppid=2070 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:56.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539623466373330376338613334643730356362376465326163626133 Oct 2 19:17:56.114053 env[1050]: time="2023-10-02T19:17:56.113988740Z" level=info msg="StartContainer for \"59b4f7307c8a34d705cb7de2acba384eb38e4eb0502cdf4677c5f0fc9369d51c\" returns successfully" Oct 2 19:17:56.813656 kubelet[1941]: I1002 19:17:56.813591 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-nxrxw" podStartSLOduration=4.813493067 podCreationTimestamp="2023-10-02 19:17:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:17:53.894930956 +0000 UTC m=+17.332806909" watchObservedRunningTime="2023-10-02 19:17:56.813493067 +0000 UTC m=+20.251369080" Oct 2 19:17:58.496000 audit[2297]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:58.500052 kernel: kauditd_printk_skb: 357 callbacks suppressed Oct 2 19:17:58.500116 kernel: audit: type=1325 audit(1696274278.496:1040): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:58.496000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffc059ad4b0 a2=0 a3=7ffc059ad49c items=0 ppid=2123 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:58.518216 kernel: audit: type=1300 audit(1696274278.496:1040): arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffc059ad4b0 a2=0 a3=7ffc059ad49c items=0 ppid=2123 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:58.496000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:58.497000 audit[2297]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:58.525870 kernel: audit: type=1327 audit(1696274278.496:1040): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:58.525958 kernel: audit: type=1325 audit(1696274278.497:1041): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:58.497000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffc059ad4b0 a2=0 a3=4f4e203b7374726f items=0 ppid=2123 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:58.531845 kernel: audit: type=1300 audit(1696274278.497:1041): arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffc059ad4b0 a2=0 a3=4f4e203b7374726f items=0 ppid=2123 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:58.497000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:58.534725 kernel: audit: type=1327 audit(1696274278.497:1041): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:58.534766 kernel: audit: type=1325 audit(1696274278.525:1042): table=filter:91 family=2 entries=16 op=nft_register_rule pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:58.525000 audit[2299]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:58.525000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffe470072b0 a2=0 a3=7ffe4700729c items=0 ppid=2123 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:58.543364 kernel: audit: type=1300 audit(1696274278.525:1042): arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffe470072b0 a2=0 a3=7ffe4700729c items=0 ppid=2123 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:58.543435 kernel: audit: type=1327 audit(1696274278.525:1042): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:58.525000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:58.525000 audit[2299]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:58.548918 kernel: audit: type=1325 audit(1696274278.525:1043): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:58.525000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffe470072b0 a2=0 a3=0 items=0 ppid=2123 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:58.525000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:58.749423 kubelet[1941]: I1002 19:17:58.749184 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-59c686f986-9p9t7" podStartSLOduration=3.739867893 podCreationTimestamp="2023-10-02 19:17:52 +0000 UTC" firstStartedPulling="2023-10-02 19:17:52.965832295 +0000 UTC m=+16.403708198" lastFinishedPulling="2023-10-02 19:17:55.97502278 +0000 UTC m=+19.412898733" observedRunningTime="2023-10-02 19:17:56.895535335 +0000 UTC m=+20.333411288" watchObservedRunningTime="2023-10-02 19:17:58.749058428 +0000 UTC m=+22.186934411" Oct 2 19:17:58.750636 kubelet[1941]: I1002 19:17:58.750606 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:58.765829 systemd[1]: Created slice kubepods-besteffort-pod42d15916_2aa3_49ba_bd6c_52b73ed66beb.slice. Oct 2 19:17:58.845766 kubelet[1941]: I1002 19:17:58.845707 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:17:58.851971 systemd[1]: Created slice kubepods-besteffort-pod1744ee9c_abee_417d_a98f_2abc66f741dc.slice. Oct 2 19:17:58.928701 kubelet[1941]: I1002 19:17:58.928661 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/42d15916-2aa3-49ba-bd6c-52b73ed66beb-typha-certs\") pod \"calico-typha-6445dc4cc6-6vt6n\" (UID: \"42d15916-2aa3-49ba-bd6c-52b73ed66beb\") " pod="calico-system/calico-typha-6445dc4cc6-6vt6n" Oct 2 19:17:58.928987 kubelet[1941]: I1002 19:17:58.928972 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d7s5x\" (UniqueName: \"kubernetes.io/projected/42d15916-2aa3-49ba-bd6c-52b73ed66beb-kube-api-access-d7s5x\") pod \"calico-typha-6445dc4cc6-6vt6n\" (UID: \"42d15916-2aa3-49ba-bd6c-52b73ed66beb\") " pod="calico-system/calico-typha-6445dc4cc6-6vt6n" Oct 2 19:17:58.929118 kubelet[1941]: I1002 19:17:58.929106 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/42d15916-2aa3-49ba-bd6c-52b73ed66beb-tigera-ca-bundle\") pod \"calico-typha-6445dc4cc6-6vt6n\" (UID: \"42d15916-2aa3-49ba-bd6c-52b73ed66beb\") " pod="calico-system/calico-typha-6445dc4cc6-6vt6n" Oct 2 19:17:59.030348 kubelet[1941]: I1002 19:17:59.030316 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1744ee9c-abee-417d-a98f-2abc66f741dc-tigera-ca-bundle\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.030622 kubelet[1941]: I1002 19:17:59.030609 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/1744ee9c-abee-417d-a98f-2abc66f741dc-node-certs\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.030749 kubelet[1941]: I1002 19:17:59.030736 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/1744ee9c-abee-417d-a98f-2abc66f741dc-var-run-calico\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.030850 kubelet[1941]: I1002 19:17:59.030840 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/1744ee9c-abee-417d-a98f-2abc66f741dc-cni-bin-dir\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.030938 kubelet[1941]: I1002 19:17:59.030928 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/1744ee9c-abee-417d-a98f-2abc66f741dc-flexvol-driver-host\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.031046 kubelet[1941]: I1002 19:17:59.031035 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ct58z\" (UniqueName: \"kubernetes.io/projected/1744ee9c-abee-417d-a98f-2abc66f741dc-kube-api-access-ct58z\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.031243 kubelet[1941]: I1002 19:17:59.031193 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/1744ee9c-abee-417d-a98f-2abc66f741dc-policysync\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.031295 kubelet[1941]: I1002 19:17:59.031249 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/1744ee9c-abee-417d-a98f-2abc66f741dc-cni-net-dir\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.031295 kubelet[1941]: I1002 19:17:59.031278 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/1744ee9c-abee-417d-a98f-2abc66f741dc-cni-log-dir\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.031357 kubelet[1941]: I1002 19:17:59.031308 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1744ee9c-abee-417d-a98f-2abc66f741dc-xtables-lock\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.031357 kubelet[1941]: I1002 19:17:59.031338 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1744ee9c-abee-417d-a98f-2abc66f741dc-lib-modules\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.031448 kubelet[1941]: I1002 19:17:59.031365 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/1744ee9c-abee-417d-a98f-2abc66f741dc-var-lib-calico\") pod \"calico-node-tpm8v\" (UID: \"1744ee9c-abee-417d-a98f-2abc66f741dc\") " pod="calico-system/calico-node-tpm8v" Oct 2 19:17:59.077442 env[1050]: time="2023-10-02T19:17:59.076203290Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6445dc4cc6-6vt6n,Uid:42d15916-2aa3-49ba-bd6c-52b73ed66beb,Namespace:calico-system,Attempt:0,}" Oct 2 19:17:59.103044 env[1050]: time="2023-10-02T19:17:59.102950206Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:17:59.103215 env[1050]: time="2023-10-02T19:17:59.103041343Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:17:59.103215 env[1050]: time="2023-10-02T19:17:59.103073786Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:17:59.108226 env[1050]: time="2023-10-02T19:17:59.103373839Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e089be68d14769526c6dfee004ef11037aed6a8fd77b3797820021383e1f6dbc pid=2308 runtime=io.containerd.runc.v2 Oct 2 19:17:59.127994 systemd[1]: Started cri-containerd-e089be68d14769526c6dfee004ef11037aed6a8fd77b3797820021383e1f6dbc.scope. Oct 2 19:17:59.133611 kubelet[1941]: E1002 19:17:59.133581 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.133756 kubelet[1941]: W1002 19:17:59.133727 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.133984 kubelet[1941]: E1002 19:17:59.133876 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.134179 kubelet[1941]: E1002 19:17:59.134170 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.134310 kubelet[1941]: W1002 19:17:59.134298 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.134422 kubelet[1941]: E1002 19:17:59.134399 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.134704 kubelet[1941]: E1002 19:17:59.134666 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.134704 kubelet[1941]: W1002 19:17:59.134699 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.134784 kubelet[1941]: E1002 19:17:59.134729 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.138415 kubelet[1941]: E1002 19:17:59.138097 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.138415 kubelet[1941]: W1002 19:17:59.138120 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.138415 kubelet[1941]: E1002 19:17:59.138279 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.138415 kubelet[1941]: W1002 19:17:59.138288 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.138642 kubelet[1941]: E1002 19:17:59.138441 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.138642 kubelet[1941]: W1002 19:17:59.138451 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.138642 kubelet[1941]: E1002 19:17:59.138587 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.138642 kubelet[1941]: W1002 19:17:59.138594 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.138760 kubelet[1941]: E1002 19:17:59.138748 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.138760 kubelet[1941]: W1002 19:17:59.138757 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.138822 kubelet[1941]: E1002 19:17:59.138775 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.138924 kubelet[1941]: E1002 19:17:59.138904 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.139016 kubelet[1941]: E1002 19:17:59.138916 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.139118 kubelet[1941]: W1002 19:17:59.139100 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.139213 kubelet[1941]: E1002 19:17:59.139202 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.141419 kubelet[1941]: E1002 19:17:59.138929 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.141419 kubelet[1941]: E1002 19:17:59.138938 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.141419 kubelet[1941]: E1002 19:17:59.138949 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.141792 kubelet[1941]: E1002 19:17:59.141634 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.141792 kubelet[1941]: W1002 19:17:59.141649 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.141792 kubelet[1941]: E1002 19:17:59.141681 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.143954 kubelet[1941]: E1002 19:17:59.143816 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.143954 kubelet[1941]: W1002 19:17:59.143827 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.143954 kubelet[1941]: E1002 19:17:59.143855 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.144197 kubelet[1941]: E1002 19:17:59.144128 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.144197 kubelet[1941]: W1002 19:17:59.144138 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.144197 kubelet[1941]: E1002 19:17:59.144170 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.144356 kubelet[1941]: E1002 19:17:59.144335 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.144424 kubelet[1941]: W1002 19:17:59.144352 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.144474 kubelet[1941]: E1002 19:17:59.144434 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.144787 kubelet[1941]: E1002 19:17:59.144749 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.144787 kubelet[1941]: W1002 19:17:59.144764 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.144930 kubelet[1941]: E1002 19:17:59.144889 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.144930 kubelet[1941]: E1002 19:17:59.144919 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.144930 kubelet[1941]: W1002 19:17:59.144929 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.145212 kubelet[1941]: E1002 19:17:59.145083 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.147963 kubelet[1941]: E1002 19:17:59.147933 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.147963 kubelet[1941]: W1002 19:17:59.147953 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.148114 kubelet[1941]: E1002 19:17:59.148029 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.148593 kubelet[1941]: E1002 19:17:59.148572 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.148593 kubelet[1941]: W1002 19:17:59.148586 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.151159 kubelet[1941]: E1002 19:17:59.151125 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.151159 kubelet[1941]: W1002 19:17:59.151149 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.151335 kubelet[1941]: E1002 19:17:59.151310 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.151405 kubelet[1941]: W1002 19:17:59.151331 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.151405 kubelet[1941]: E1002 19:17:59.151368 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.151675 kubelet[1941]: E1002 19:17:59.151650 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.151675 kubelet[1941]: W1002 19:17:59.151668 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.151751 kubelet[1941]: E1002 19:17:59.151682 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.151751 kubelet[1941]: E1002 19:17:59.151718 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.151852 kubelet[1941]: E1002 19:17:59.151835 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.151942 kubelet[1941]: E1002 19:17:59.151881 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.152019 kubelet[1941]: W1002 19:17:59.152005 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.152084 kubelet[1941]: E1002 19:17:59.152076 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.152951 kubelet[1941]: E1002 19:17:59.152939 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:17:59.153030 kubelet[1941]: W1002 19:17:59.153019 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:17:59.153092 kubelet[1941]: E1002 19:17:59.153084 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:17:59.156413 env[1050]: time="2023-10-02T19:17:59.156337775Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-tpm8v,Uid:1744ee9c-abee-417d-a98f-2abc66f741dc,Namespace:calico-system,Attempt:0,}" Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.169000 audit: BPF prog-id=127 op=LOAD Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2308 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530383962653638643134373639353236633664666565303034656631 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2308 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530383962653638643134373639353236633664666565303034656631 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.170000 audit: BPF prog-id=128 op=LOAD Oct 2 19:17:59.170000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000298a00 items=0 ppid=2308 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530383962653638643134373639353236633664666565303034656631 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit: BPF prog-id=129 op=LOAD Oct 2 19:17:59.172000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000298a48 items=0 ppid=2308 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530383962653638643134373639353236633664666565303034656631 Oct 2 19:17:59.172000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:17:59.172000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { perfmon } for pid=2319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit[2319]: AVC avc: denied { bpf } for pid=2319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.172000 audit: BPF prog-id=130 op=LOAD Oct 2 19:17:59.172000 audit[2319]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000298e58 items=0 ppid=2308 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530383962653638643134373639353236633664666565303034656631 Oct 2 19:17:59.197199 env[1050]: time="2023-10-02T19:17:59.197097291Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:17:59.197498 env[1050]: time="2023-10-02T19:17:59.197467800Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:17:59.197609 env[1050]: time="2023-10-02T19:17:59.197583725Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:17:59.197903 env[1050]: time="2023-10-02T19:17:59.197872546Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bae4723c36c0082bd72f6a5c072756cd0abba785defcb2d28bc3c420979a90e3 pid=2369 runtime=io.containerd.runc.v2 Oct 2 19:17:59.211681 systemd[1]: Started cri-containerd-bae4723c36c0082bd72f6a5c072756cd0abba785defcb2d28bc3c420979a90e3.scope. Oct 2 19:17:59.248021 env[1050]: time="2023-10-02T19:17:59.247959981Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6445dc4cc6-6vt6n,Uid:42d15916-2aa3-49ba-bd6c-52b73ed66beb,Namespace:calico-system,Attempt:0,} returns sandbox id \"e089be68d14769526c6dfee004ef11037aed6a8fd77b3797820021383e1f6dbc\"" Oct 2 19:17:59.250505 env[1050]: time="2023-10-02T19:17:59.250459540Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 19:17:59.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.253000 audit: BPF prog-id=131 op=LOAD Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2369 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261653437323363333663303038326264373266366135633037323735 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2369 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261653437323363333663303038326264373266366135633037323735 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.257000 audit: BPF prog-id=132 op=LOAD Oct 2 19:17:59.257000 audit[2379]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00038f520 items=0 ppid=2369 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261653437323363333663303038326264373266366135633037323735 Oct 2 19:17:59.258000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.258000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.258000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.258000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.258000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.258000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.258000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.258000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.258000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.258000 audit: BPF prog-id=133 op=LOAD Oct 2 19:17:59.258000 audit[2379]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00038f568 items=0 ppid=2369 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261653437323363333663303038326264373266366135633037323735 Oct 2 19:17:59.260000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:17:59.260000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { perfmon } for pid=2379 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit[2379]: AVC avc: denied { bpf } for pid=2379 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:17:59.261000 audit: BPF prog-id=134 op=LOAD Oct 2 19:17:59.261000 audit[2379]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00038f978 items=0 ppid=2369 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261653437323363333663303038326264373266366135633037323735 Oct 2 19:17:59.298824 env[1050]: time="2023-10-02T19:17:59.298586191Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-tpm8v,Uid:1744ee9c-abee-417d-a98f-2abc66f741dc,Namespace:calico-system,Attempt:0,} returns sandbox id \"bae4723c36c0082bd72f6a5c072756cd0abba785defcb2d28bc3c420979a90e3\"" Oct 2 19:17:59.545000 audit[2407]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2407 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:59.545000 audit[2407]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffef5046a30 a2=0 a3=7ffef5046a1c items=0 ppid=2123 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.545000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:17:59.546000 audit[2407]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2407 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:17:59.546000 audit[2407]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffef5046a30 a2=0 a3=0 items=0 ppid=2123 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.546000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:01.243469 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3181406406.mount: Deactivated successfully. Oct 2 19:18:03.370525 env[1050]: time="2023-10-02T19:18:03.370138780Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:03.373441 env[1050]: time="2023-10-02T19:18:03.373408133Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:03.377633 env[1050]: time="2023-10-02T19:18:03.377601134Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:03.381671 env[1050]: time="2023-10-02T19:18:03.381640999Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:03.384053 env[1050]: time="2023-10-02T19:18:03.383970912Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f\"" Oct 2 19:18:03.387220 env[1050]: time="2023-10-02T19:18:03.387191791Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:18:03.391363 env[1050]: time="2023-10-02T19:18:03.391272996Z" level=info msg="CreateContainer within sandbox \"e089be68d14769526c6dfee004ef11037aed6a8fd77b3797820021383e1f6dbc\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 19:18:03.407378 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1145059970.mount: Deactivated successfully. Oct 2 19:18:03.416858 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1415874294.mount: Deactivated successfully. Oct 2 19:18:03.427792 env[1050]: time="2023-10-02T19:18:03.427725271Z" level=info msg="CreateContainer within sandbox \"e089be68d14769526c6dfee004ef11037aed6a8fd77b3797820021383e1f6dbc\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"e12eb19051e68a5db81cc2ed4174926ad9ecf71f20b60e7425346f72e30292ea\"" Oct 2 19:18:03.431310 env[1050]: time="2023-10-02T19:18:03.431273274Z" level=info msg="StartContainer for \"e12eb19051e68a5db81cc2ed4174926ad9ecf71f20b60e7425346f72e30292ea\"" Oct 2 19:18:03.455903 systemd[1]: Started cri-containerd-e12eb19051e68a5db81cc2ed4174926ad9ecf71f20b60e7425346f72e30292ea.scope. Oct 2 19:18:03.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.474000 audit: BPF prog-id=135 op=LOAD Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2308 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:03.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531326562313930353165363861356462383163633265643431373439 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2308 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:03.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531326562313930353165363861356462383163633265643431373439 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit: BPF prog-id=136 op=LOAD Oct 2 19:18:03.475000 audit[2418]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000298c80 items=0 ppid=2308 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:03.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531326562313930353165363861356462383163633265643431373439 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.475000 audit: BPF prog-id=137 op=LOAD Oct 2 19:18:03.475000 audit[2418]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000298cc8 items=0 ppid=2308 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:03.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531326562313930353165363861356462383163633265643431373439 Oct 2 19:18:03.477000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:18:03.477000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { perfmon } for pid=2418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit[2418]: AVC avc: denied { bpf } for pid=2418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:03.477000 audit: BPF prog-id=138 op=LOAD Oct 2 19:18:03.477000 audit[2418]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002990d8 items=0 ppid=2308 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:03.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531326562313930353165363861356462383163633265643431373439 Oct 2 19:18:03.512240 env[1050]: time="2023-10-02T19:18:03.510550218Z" level=info msg="StartContainer for \"e12eb19051e68a5db81cc2ed4174926ad9ecf71f20b60e7425346f72e30292ea\" returns successfully" Oct 2 19:18:03.927684 kubelet[1941]: I1002 19:18:03.927637 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-6445dc4cc6-6vt6n" podStartSLOduration=1.7922155499999999 podCreationTimestamp="2023-10-02 19:17:58 +0000 UTC" firstStartedPulling="2023-10-02 19:17:59.249502884 +0000 UTC m=+22.687378797" lastFinishedPulling="2023-10-02 19:18:03.384665287 +0000 UTC m=+26.822541240" observedRunningTime="2023-10-02 19:18:03.926876041 +0000 UTC m=+27.364752004" watchObservedRunningTime="2023-10-02 19:18:03.927377993 +0000 UTC m=+27.365253976" Oct 2 19:18:03.980097 kubelet[1941]: E1002 19:18:03.980036 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.980620 kubelet[1941]: W1002 19:18:03.980571 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.980912 kubelet[1941]: E1002 19:18:03.980875 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.981731 kubelet[1941]: E1002 19:18:03.981704 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.981932 kubelet[1941]: W1002 19:18:03.981902 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.982147 kubelet[1941]: E1002 19:18:03.982123 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.982805 kubelet[1941]: E1002 19:18:03.982780 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.982990 kubelet[1941]: W1002 19:18:03.982964 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.983150 kubelet[1941]: E1002 19:18:03.983128 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.983823 kubelet[1941]: E1002 19:18:03.983799 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.984000 kubelet[1941]: W1002 19:18:03.983974 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.984170 kubelet[1941]: E1002 19:18:03.984148 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.985798 kubelet[1941]: E1002 19:18:03.985773 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.985988 kubelet[1941]: W1002 19:18:03.985960 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.986147 kubelet[1941]: E1002 19:18:03.986125 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.986830 kubelet[1941]: E1002 19:18:03.986806 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.987010 kubelet[1941]: W1002 19:18:03.986984 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.988441 kubelet[1941]: E1002 19:18:03.987211 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.990454 kubelet[1941]: E1002 19:18:03.990197 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.990454 kubelet[1941]: W1002 19:18:03.990245 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.990454 kubelet[1941]: E1002 19:18:03.990287 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.990727 kubelet[1941]: E1002 19:18:03.990682 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.990727 kubelet[1941]: W1002 19:18:03.990703 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.990874 kubelet[1941]: E1002 19:18:03.990732 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.991344 kubelet[1941]: E1002 19:18:03.991073 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.991344 kubelet[1941]: W1002 19:18:03.991108 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.991344 kubelet[1941]: E1002 19:18:03.991137 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.991662 kubelet[1941]: E1002 19:18:03.991512 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.991662 kubelet[1941]: W1002 19:18:03.991532 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.991662 kubelet[1941]: E1002 19:18:03.991561 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.992463 kubelet[1941]: E1002 19:18:03.991850 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.992463 kubelet[1941]: W1002 19:18:03.991894 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.992463 kubelet[1941]: E1002 19:18:03.991934 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:03.992463 kubelet[1941]: E1002 19:18:03.992264 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:03.992463 kubelet[1941]: W1002 19:18:03.992284 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:03.992463 kubelet[1941]: E1002 19:18:03.992315 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.007000 audit[2463]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=2463 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:04.009803 kernel: kauditd_printk_skb: 179 callbacks suppressed Oct 2 19:18:04.009874 kernel: audit: type=1325 audit(1696274284.007:1100): table=filter:95 family=2 entries=15 op=nft_register_rule pid=2463 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:04.007000 audit[2463]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffcda174180 a2=0 a3=7ffcda17416c items=0 ppid=2123 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:04.018192 kernel: audit: type=1300 audit(1696274284.007:1100): arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffcda174180 a2=0 a3=7ffcda17416c items=0 ppid=2123 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:04.018253 kernel: audit: type=1327 audit(1696274284.007:1100): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:04.007000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:04.008000 audit[2463]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2463 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:04.023827 kernel: audit: type=1325 audit(1696274284.008:1101): table=nat:96 family=2 entries=19 op=nft_register_chain pid=2463 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:04.023869 kernel: audit: type=1300 audit(1696274284.008:1101): arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffcda174180 a2=0 a3=7ffcda17416c items=0 ppid=2123 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:04.008000 audit[2463]: SYSCALL arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffcda174180 a2=0 a3=7ffcda17416c items=0 ppid=2123 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:04.008000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:04.032415 kernel: audit: type=1327 audit(1696274284.008:1101): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:04.078565 kubelet[1941]: E1002 19:18:04.078526 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.078842 kubelet[1941]: W1002 19:18:04.078811 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.079013 kubelet[1941]: E1002 19:18:04.078990 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.079600 kubelet[1941]: E1002 19:18:04.079575 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.079803 kubelet[1941]: W1002 19:18:04.079775 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.080061 kubelet[1941]: E1002 19:18:04.080007 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.080322 kubelet[1941]: E1002 19:18:04.080279 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.080322 kubelet[1941]: W1002 19:18:04.080310 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.080626 kubelet[1941]: E1002 19:18:04.080336 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.080626 kubelet[1941]: E1002 19:18:04.080500 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.080626 kubelet[1941]: W1002 19:18:04.080509 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.080626 kubelet[1941]: E1002 19:18:04.080521 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.081696 kubelet[1941]: E1002 19:18:04.081638 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.081696 kubelet[1941]: W1002 19:18:04.081651 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.081696 kubelet[1941]: E1002 19:18:04.081670 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.082019 kubelet[1941]: E1002 19:18:04.081875 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.082019 kubelet[1941]: W1002 19:18:04.081887 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.082019 kubelet[1941]: E1002 19:18:04.081903 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.082267 kubelet[1941]: E1002 19:18:04.082214 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.082267 kubelet[1941]: W1002 19:18:04.082241 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.082511 kubelet[1941]: E1002 19:18:04.082319 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.082511 kubelet[1941]: E1002 19:18:04.082442 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.082511 kubelet[1941]: W1002 19:18:04.082451 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.082741 kubelet[1941]: E1002 19:18:04.082525 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.082741 kubelet[1941]: E1002 19:18:04.082662 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.082741 kubelet[1941]: W1002 19:18:04.082671 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.082741 kubelet[1941]: E1002 19:18:04.082687 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.082997 kubelet[1941]: E1002 19:18:04.082870 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.082997 kubelet[1941]: W1002 19:18:04.082880 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.082997 kubelet[1941]: E1002 19:18:04.082895 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.083187 kubelet[1941]: E1002 19:18:04.083050 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.083187 kubelet[1941]: W1002 19:18:04.083060 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.083187 kubelet[1941]: E1002 19:18:04.083072 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.083722 kubelet[1941]: E1002 19:18:04.083674 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.083722 kubelet[1941]: W1002 19:18:04.083693 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.083722 kubelet[1941]: E1002 19:18:04.083719 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.084180 kubelet[1941]: E1002 19:18:04.084151 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.084180 kubelet[1941]: W1002 19:18:04.084167 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.084361 kubelet[1941]: E1002 19:18:04.084253 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.084722 kubelet[1941]: E1002 19:18:04.084664 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.084722 kubelet[1941]: W1002 19:18:04.084694 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.084722 kubelet[1941]: E1002 19:18:04.084710 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.085203 kubelet[1941]: E1002 19:18:04.085163 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.085203 kubelet[1941]: W1002 19:18:04.085191 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.085203 kubelet[1941]: E1002 19:18:04.085207 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.085735 kubelet[1941]: E1002 19:18:04.085707 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.085735 kubelet[1941]: W1002 19:18:04.085732 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.085926 kubelet[1941]: E1002 19:18:04.085752 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.086202 kubelet[1941]: E1002 19:18:04.086175 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.086202 kubelet[1941]: W1002 19:18:04.086191 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.086447 kubelet[1941]: E1002 19:18:04.086272 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.086732 kubelet[1941]: E1002 19:18:04.086703 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.086732 kubelet[1941]: W1002 19:18:04.086718 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.086905 kubelet[1941]: E1002 19:18:04.086741 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.999757 kubelet[1941]: E1002 19:18:04.998881 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.999757 kubelet[1941]: W1002 19:18:04.998925 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.999757 kubelet[1941]: E1002 19:18:04.998991 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:04.999757 kubelet[1941]: E1002 19:18:04.999513 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:04.999757 kubelet[1941]: W1002 19:18:04.999536 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:04.999757 kubelet[1941]: E1002 19:18:04.999569 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.006904 kubelet[1941]: E1002 19:18:05.002632 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.006904 kubelet[1941]: W1002 19:18:05.002678 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.006904 kubelet[1941]: E1002 19:18:05.002745 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.006904 kubelet[1941]: E1002 19:18:05.005292 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.006904 kubelet[1941]: W1002 19:18:05.005324 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.006904 kubelet[1941]: E1002 19:18:05.005373 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.006904 kubelet[1941]: E1002 19:18:05.006357 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.006904 kubelet[1941]: W1002 19:18:05.006602 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.006904 kubelet[1941]: E1002 19:18:05.006641 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.009288 kubelet[1941]: E1002 19:18:05.008529 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.009288 kubelet[1941]: W1002 19:18:05.008558 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.009288 kubelet[1941]: E1002 19:18:05.008594 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.009288 kubelet[1941]: E1002 19:18:05.009073 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.009288 kubelet[1941]: W1002 19:18:05.009135 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.009288 kubelet[1941]: E1002 19:18:05.009166 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.010202 kubelet[1941]: E1002 19:18:05.010022 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.010202 kubelet[1941]: W1002 19:18:05.010046 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.010202 kubelet[1941]: E1002 19:18:05.010076 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.010804 kubelet[1941]: E1002 19:18:05.010772 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.011230 kubelet[1941]: W1002 19:18:05.010977 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.011230 kubelet[1941]: E1002 19:18:05.011042 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.011864 kubelet[1941]: E1002 19:18:05.011839 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.012231 kubelet[1941]: W1002 19:18:05.012027 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.012231 kubelet[1941]: E1002 19:18:05.012086 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.012768 kubelet[1941]: E1002 19:18:05.012739 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.013693 kubelet[1941]: W1002 19:18:05.013480 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.013693 kubelet[1941]: E1002 19:18:05.013529 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.014149 kubelet[1941]: E1002 19:18:05.014124 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.014704 kubelet[1941]: W1002 19:18:05.014674 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.015023 kubelet[1941]: E1002 19:18:05.014917 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.089803 kubelet[1941]: E1002 19:18:05.089743 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.089803 kubelet[1941]: W1002 19:18:05.089784 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.100314 kubelet[1941]: E1002 19:18:05.089825 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.100314 kubelet[1941]: E1002 19:18:05.090181 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.100314 kubelet[1941]: W1002 19:18:05.090201 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.100314 kubelet[1941]: E1002 19:18:05.090231 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.100314 kubelet[1941]: E1002 19:18:05.090602 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.100314 kubelet[1941]: W1002 19:18:05.090621 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.100314 kubelet[1941]: E1002 19:18:05.090650 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.100314 kubelet[1941]: E1002 19:18:05.091114 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.100314 kubelet[1941]: W1002 19:18:05.091137 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.100314 kubelet[1941]: E1002 19:18:05.091183 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.101321 kubelet[1941]: E1002 19:18:05.091579 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.101321 kubelet[1941]: W1002 19:18:05.091599 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.101321 kubelet[1941]: E1002 19:18:05.091655 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.101321 kubelet[1941]: E1002 19:18:05.091930 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.101321 kubelet[1941]: W1002 19:18:05.091950 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.101321 kubelet[1941]: E1002 19:18:05.092001 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.101321 kubelet[1941]: E1002 19:18:05.092293 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.101321 kubelet[1941]: W1002 19:18:05.092323 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.101321 kubelet[1941]: E1002 19:18:05.092436 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.101321 kubelet[1941]: E1002 19:18:05.092830 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.102561 kubelet[1941]: W1002 19:18:05.092851 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.102561 kubelet[1941]: E1002 19:18:05.092894 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.102561 kubelet[1941]: E1002 19:18:05.093277 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.102561 kubelet[1941]: W1002 19:18:05.093297 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.102561 kubelet[1941]: E1002 19:18:05.093337 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.102561 kubelet[1941]: E1002 19:18:05.093707 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.102561 kubelet[1941]: W1002 19:18:05.093727 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.102561 kubelet[1941]: E1002 19:18:05.093758 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.102561 kubelet[1941]: E1002 19:18:05.094041 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.102561 kubelet[1941]: W1002 19:18:05.094060 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.103887 kubelet[1941]: E1002 19:18:05.094096 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.103887 kubelet[1941]: E1002 19:18:05.094516 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.103887 kubelet[1941]: W1002 19:18:05.094535 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.103887 kubelet[1941]: E1002 19:18:05.094578 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.103887 kubelet[1941]: E1002 19:18:05.094969 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.103887 kubelet[1941]: W1002 19:18:05.094991 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.103887 kubelet[1941]: E1002 19:18:05.095108 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.103887 kubelet[1941]: E1002 19:18:05.095440 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.103887 kubelet[1941]: W1002 19:18:05.095460 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.103887 kubelet[1941]: E1002 19:18:05.095502 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.105451 kubelet[1941]: E1002 19:18:05.095916 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.105451 kubelet[1941]: W1002 19:18:05.095944 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.105451 kubelet[1941]: E1002 19:18:05.096059 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.105451 kubelet[1941]: E1002 19:18:05.096658 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.105451 kubelet[1941]: W1002 19:18:05.096679 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.105451 kubelet[1941]: E1002 19:18:05.096755 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.105451 kubelet[1941]: E1002 19:18:05.096988 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.105451 kubelet[1941]: W1002 19:18:05.097007 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.105451 kubelet[1941]: E1002 19:18:05.097035 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.105451 kubelet[1941]: E1002 19:18:05.097746 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.106605 kubelet[1941]: W1002 19:18:05.097767 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.106605 kubelet[1941]: E1002 19:18:05.097796 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.172174 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4182994217.mount: Deactivated successfully. Oct 2 19:18:05.924263 kubelet[1941]: E1002 19:18:05.924224 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.924263 kubelet[1941]: W1002 19:18:05.924254 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.924679 kubelet[1941]: E1002 19:18:05.924293 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.924679 kubelet[1941]: E1002 19:18:05.924624 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.924679 kubelet[1941]: W1002 19:18:05.924644 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.924679 kubelet[1941]: E1002 19:18:05.924672 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.924950 kubelet[1941]: E1002 19:18:05.924938 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.925018 kubelet[1941]: W1002 19:18:05.924957 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.925018 kubelet[1941]: E1002 19:18:05.924984 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.925423 kubelet[1941]: E1002 19:18:05.925368 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.925542 kubelet[1941]: W1002 19:18:05.925445 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.925542 kubelet[1941]: E1002 19:18:05.925478 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.925835 kubelet[1941]: E1002 19:18:05.925801 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.925835 kubelet[1941]: W1002 19:18:05.925828 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.926052 kubelet[1941]: E1002 19:18:05.925858 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.926258 kubelet[1941]: E1002 19:18:05.926223 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.926422 kubelet[1941]: W1002 19:18:05.926264 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.926422 kubelet[1941]: E1002 19:18:05.926308 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.926973 kubelet[1941]: E1002 19:18:05.926938 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.927111 kubelet[1941]: W1002 19:18:05.926980 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.927111 kubelet[1941]: E1002 19:18:05.927027 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.927601 kubelet[1941]: E1002 19:18:05.927549 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.927601 kubelet[1941]: W1002 19:18:05.927593 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.927793 kubelet[1941]: E1002 19:18:05.927639 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.928112 kubelet[1941]: E1002 19:18:05.928069 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.928112 kubelet[1941]: W1002 19:18:05.928109 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.928293 kubelet[1941]: E1002 19:18:05.928155 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.928761 kubelet[1941]: E1002 19:18:05.928720 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.928930 kubelet[1941]: W1002 19:18:05.928760 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.928930 kubelet[1941]: E1002 19:18:05.928804 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.930163 kubelet[1941]: E1002 19:18:05.930095 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.930163 kubelet[1941]: W1002 19:18:05.930151 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.930432 kubelet[1941]: E1002 19:18:05.930203 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.930756 kubelet[1941]: E1002 19:18:05.930713 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.930877 kubelet[1941]: W1002 19:18:05.930758 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.930877 kubelet[1941]: E1002 19:18:05.930805 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.998043 kubelet[1941]: E1002 19:18:05.997976 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.998283 kubelet[1941]: W1002 19:18:05.998059 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.998283 kubelet[1941]: E1002 19:18:05.998108 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.998926 kubelet[1941]: E1002 19:18:05.998870 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.999057 kubelet[1941]: W1002 19:18:05.998938 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.999057 kubelet[1941]: E1002 19:18:05.998987 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:05.999611 kubelet[1941]: E1002 19:18:05.999576 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:05.999611 kubelet[1941]: W1002 19:18:05.999607 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:05.999999 kubelet[1941]: E1002 19:18:05.999651 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.000619 kubelet[1941]: E1002 19:18:06.000185 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.000619 kubelet[1941]: W1002 19:18:06.000208 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.000619 kubelet[1941]: E1002 19:18:06.000253 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.000829 kubelet[1941]: E1002 19:18:06.000676 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.000829 kubelet[1941]: W1002 19:18:06.000697 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.000829 kubelet[1941]: E1002 19:18:06.000725 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.004055 kubelet[1941]: E1002 19:18:06.001091 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.004055 kubelet[1941]: W1002 19:18:06.001121 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.004055 kubelet[1941]: E1002 19:18:06.001150 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.004055 kubelet[1941]: E1002 19:18:06.001792 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.004055 kubelet[1941]: W1002 19:18:06.001827 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.004055 kubelet[1941]: E1002 19:18:06.001886 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.004055 kubelet[1941]: E1002 19:18:06.002269 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.004055 kubelet[1941]: W1002 19:18:06.002288 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.004055 kubelet[1941]: E1002 19:18:06.002497 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.004055 kubelet[1941]: E1002 19:18:06.002689 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.009862 kubelet[1941]: W1002 19:18:06.002712 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.009862 kubelet[1941]: E1002 19:18:06.002900 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.009862 kubelet[1941]: E1002 19:18:06.003253 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.009862 kubelet[1941]: W1002 19:18:06.003272 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.009862 kubelet[1941]: E1002 19:18:06.003510 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.009862 kubelet[1941]: E1002 19:18:06.007256 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.009862 kubelet[1941]: W1002 19:18:06.007285 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.009862 kubelet[1941]: E1002 19:18:06.007345 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.009862 kubelet[1941]: E1002 19:18:06.007740 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.009862 kubelet[1941]: W1002 19:18:06.007764 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.013926 kubelet[1941]: E1002 19:18:06.007819 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.013926 kubelet[1941]: E1002 19:18:06.008543 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.013926 kubelet[1941]: W1002 19:18:06.008563 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.013926 kubelet[1941]: E1002 19:18:06.008641 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.013926 kubelet[1941]: E1002 19:18:06.010331 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.013926 kubelet[1941]: W1002 19:18:06.010354 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.013926 kubelet[1941]: E1002 19:18:06.010421 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.013926 kubelet[1941]: E1002 19:18:06.011031 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.013926 kubelet[1941]: W1002 19:18:06.011051 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.013926 kubelet[1941]: E1002 19:18:06.011079 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.016611 kubelet[1941]: E1002 19:18:06.016572 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.016611 kubelet[1941]: W1002 19:18:06.016606 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.016847 kubelet[1941]: E1002 19:18:06.016655 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.017062 kubelet[1941]: E1002 19:18:06.017030 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.017062 kubelet[1941]: W1002 19:18:06.017059 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.017267 kubelet[1941]: E1002 19:18:06.017088 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.018484 kubelet[1941]: E1002 19:18:06.017927 1941 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:18:06.018484 kubelet[1941]: W1002 19:18:06.017961 1941 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:18:06.018484 kubelet[1941]: E1002 19:18:06.017994 1941 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:18:06.662032 env[1050]: time="2023-10-02T19:18:06.661962175Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:06.668228 env[1050]: time="2023-10-02T19:18:06.668173754Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:06.677441 env[1050]: time="2023-10-02T19:18:06.677302026Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:06.682864 env[1050]: time="2023-10-02T19:18:06.682771228Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:06.685166 env[1050]: time="2023-10-02T19:18:06.685108159Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72\"" Oct 2 19:18:06.690949 env[1050]: time="2023-10-02T19:18:06.690873826Z" level=info msg="CreateContainer within sandbox \"bae4723c36c0082bd72f6a5c072756cd0abba785defcb2d28bc3c420979a90e3\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:18:06.716916 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount47846328.mount: Deactivated successfully. Oct 2 19:18:06.727857 env[1050]: time="2023-10-02T19:18:06.727798602Z" level=info msg="CreateContainer within sandbox \"bae4723c36c0082bd72f6a5c072756cd0abba785defcb2d28bc3c420979a90e3\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"33b5028248b68d7d747b6b1b41d160d0971404031db590260c95635fb0515452\"" Oct 2 19:18:06.728749 env[1050]: time="2023-10-02T19:18:06.728723641Z" level=info msg="StartContainer for \"33b5028248b68d7d747b6b1b41d160d0971404031db590260c95635fb0515452\"" Oct 2 19:18:06.776561 systemd[1]: Started cri-containerd-33b5028248b68d7d747b6b1b41d160d0971404031db590260c95635fb0515452.scope. Oct 2 19:18:06.797000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.808477 kernel: audit: type=1400 audit(1696274286.797:1102): avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.808564 kernel: audit: type=1300 audit(1696274286.797:1102): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2369 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:06.797000 audit[2549]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2369 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:06.813852 kernel: audit: type=1327 audit(1696274286.797:1102): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623530323832343862363864376437343762366231623431643136 Oct 2 19:18:06.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623530323832343862363864376437343762366231623431643136 Oct 2 19:18:06.817591 kernel: audit: type=1400 audit(1696274286.807:1103): avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit: BPF prog-id=139 op=LOAD Oct 2 19:18:06.807000 audit[2549]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001e4b60 items=0 ppid=2369 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:06.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623530323832343862363864376437343762366231623431643136 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.807000 audit: BPF prog-id=140 op=LOAD Oct 2 19:18:06.807000 audit[2549]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001e4ba8 items=0 ppid=2369 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:06.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623530323832343862363864376437343762366231623431643136 Oct 2 19:18:06.812000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:18:06.812000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:06.812000 audit: BPF prog-id=141 op=LOAD Oct 2 19:18:06.812000 audit[2549]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0001e4c38 items=0 ppid=2369 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:06.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623530323832343862363864376437343762366231623431643136 Oct 2 19:18:06.849190 env[1050]: time="2023-10-02T19:18:06.849126671Z" level=info msg="StartContainer for \"33b5028248b68d7d747b6b1b41d160d0971404031db590260c95635fb0515452\" returns successfully" Oct 2 19:18:06.855042 systemd[1]: cri-containerd-33b5028248b68d7d747b6b1b41d160d0971404031db590260c95635fb0515452.scope: Deactivated successfully. Oct 2 19:18:06.856000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:18:07.223093 env[1050]: time="2023-10-02T19:18:07.222647768Z" level=info msg="shim disconnected" id=33b5028248b68d7d747b6b1b41d160d0971404031db590260c95635fb0515452 Oct 2 19:18:07.223093 env[1050]: time="2023-10-02T19:18:07.222782198Z" level=warning msg="cleaning up after shim disconnected" id=33b5028248b68d7d747b6b1b41d160d0971404031db590260c95635fb0515452 namespace=k8s.io Oct 2 19:18:07.223093 env[1050]: time="2023-10-02T19:18:07.222809211Z" level=info msg="cleaning up dead shim" Oct 2 19:18:07.247204 env[1050]: time="2023-10-02T19:18:07.247063306Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2597 runtime=io.containerd.runc.v2\n" Oct 2 19:18:07.709073 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-33b5028248b68d7d747b6b1b41d160d0971404031db590260c95635fb0515452-rootfs.mount: Deactivated successfully. Oct 2 19:18:07.919872 env[1050]: time="2023-10-02T19:18:07.919785292Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:18:09.567915 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4193194240.mount: Deactivated successfully. Oct 2 19:18:14.463725 env[1050]: time="2023-10-02T19:18:14.463586059Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:14.471081 env[1050]: time="2023-10-02T19:18:14.471014039Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:14.478786 env[1050]: time="2023-10-02T19:18:14.478726432Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:14.484710 env[1050]: time="2023-10-02T19:18:14.484480173Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:14.489671 env[1050]: time="2023-10-02T19:18:14.489563406Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7\"" Oct 2 19:18:14.497484 env[1050]: time="2023-10-02T19:18:14.497211483Z" level=info msg="CreateContainer within sandbox \"bae4723c36c0082bd72f6a5c072756cd0abba785defcb2d28bc3c420979a90e3\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:18:14.533987 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4066172164.mount: Deactivated successfully. Oct 2 19:18:14.554432 env[1050]: time="2023-10-02T19:18:14.554247546Z" level=info msg="CreateContainer within sandbox \"bae4723c36c0082bd72f6a5c072756cd0abba785defcb2d28bc3c420979a90e3\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"e10ea4ac6684f46cb6fd43b0198f325ad946b2304751da733eb07b10c9b98ab8\"" Oct 2 19:18:14.556353 env[1050]: time="2023-10-02T19:18:14.556297051Z" level=info msg="StartContainer for \"e10ea4ac6684f46cb6fd43b0198f325ad946b2304751da733eb07b10c9b98ab8\"" Oct 2 19:18:14.597585 systemd[1]: Started cri-containerd-e10ea4ac6684f46cb6fd43b0198f325ad946b2304751da733eb07b10c9b98ab8.scope. Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.626539 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 19:18:14.626608 kernel: audit: type=1400 audit(1696274294.623:1109): avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2369 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:14.635773 kernel: audit: type=1300 audit(1696274294.623:1109): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2369 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:14.635907 kernel: audit: type=1327 audit(1696274294.623:1109): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306561346163363638346634366362366664343362303139386633 Oct 2 19:18:14.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306561346163363638346634366362366664343362303139386633 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.645169 kernel: audit: type=1400 audit(1696274294.623:1110): avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.651417 kernel: audit: type=1400 audit(1696274294.623:1110): avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.662716 kernel: audit: type=1400 audit(1696274294.623:1110): avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.662784 kernel: audit: type=1400 audit(1696274294.623:1110): avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.662811 kernel: audit: type=1400 audit(1696274294.623:1110): avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.670448 kernel: audit: type=1400 audit(1696274294.623:1110): avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.670559 kernel: audit: type=1400 audit(1696274294.623:1110): avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit: BPF prog-id=142 op=LOAD Oct 2 19:18:14.623000 audit[2619]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0002fa490 items=0 ppid=2369 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:14.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306561346163363638346634366362366664343362303139386633 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit: BPF prog-id=143 op=LOAD Oct 2 19:18:14.623000 audit[2619]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0002fa4d8 items=0 ppid=2369 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:14.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306561346163363638346634366362366664343362303139386633 Oct 2 19:18:14.623000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:18:14.623000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:14.623000 audit: BPF prog-id=144 op=LOAD Oct 2 19:18:14.623000 audit[2619]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0002fa568 items=0 ppid=2369 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:14.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531306561346163363638346634366362366664343362303139386633 Oct 2 19:18:14.690889 env[1050]: time="2023-10-02T19:18:14.690847281Z" level=info msg="StartContainer for \"e10ea4ac6684f46cb6fd43b0198f325ad946b2304751da733eb07b10c9b98ab8\" returns successfully" Oct 2 19:18:16.595159 env[1050]: time="2023-10-02T19:18:16.595013137Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:18:16.604753 systemd[1]: cri-containerd-e10ea4ac6684f46cb6fd43b0198f325ad946b2304751da733eb07b10c9b98ab8.scope: Deactivated successfully. Oct 2 19:18:16.606000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:18:16.616257 kubelet[1941]: I1002 19:18:16.616190 1941 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 19:18:16.660625 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e10ea4ac6684f46cb6fd43b0198f325ad946b2304751da733eb07b10c9b98ab8-rootfs.mount: Deactivated successfully. Oct 2 19:18:16.665318 kubelet[1941]: I1002 19:18:16.663717 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:18:16.671937 systemd[1]: Created slice kubepods-burstable-podcc29fcd6_91e6_49ec_97c8_fbc782faab7e.slice. Oct 2 19:18:16.777681 kubelet[1941]: I1002 19:18:16.777491 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/cc29fcd6-91e6-49ec-97c8-fbc782faab7e-config-volume\") pod \"coredns-5d78c9869d-57tbk\" (UID: \"cc29fcd6-91e6-49ec-97c8-fbc782faab7e\") " pod="kube-system/coredns-5d78c9869d-57tbk" Oct 2 19:18:16.777681 kubelet[1941]: I1002 19:18:16.777583 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-td4gh\" (UniqueName: \"kubernetes.io/projected/cc29fcd6-91e6-49ec-97c8-fbc782faab7e-kube-api-access-td4gh\") pod \"coredns-5d78c9869d-57tbk\" (UID: \"cc29fcd6-91e6-49ec-97c8-fbc782faab7e\") " pod="kube-system/coredns-5d78c9869d-57tbk" Oct 2 19:18:16.793582 kubelet[1941]: I1002 19:18:16.793500 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:18:16.797257 kubelet[1941]: I1002 19:18:16.796817 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:18:16.797257 kubelet[1941]: I1002 19:18:16.796999 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:18:16.806946 systemd[1]: Created slice kubepods-besteffort-pod864a145b_347f_4161_a45a_6f121db1faac.slice. Oct 2 19:18:16.820837 systemd[1]: Created slice kubepods-besteffort-pod02564458_81f3_44e1_8483_a355aa1ed954.slice. Oct 2 19:18:16.827997 systemd[1]: Created slice kubepods-burstable-pod9dd4139f_313b_499c_a9dd_80100312b8ea.slice. Oct 2 19:18:16.856678 env[1050]: time="2023-10-02T19:18:16.856021413Z" level=info msg="shim disconnected" id=e10ea4ac6684f46cb6fd43b0198f325ad946b2304751da733eb07b10c9b98ab8 Oct 2 19:18:16.856678 env[1050]: time="2023-10-02T19:18:16.856117026Z" level=warning msg="cleaning up after shim disconnected" id=e10ea4ac6684f46cb6fd43b0198f325ad946b2304751da733eb07b10c9b98ab8 namespace=k8s.io Oct 2 19:18:16.856678 env[1050]: time="2023-10-02T19:18:16.856141931Z" level=info msg="cleaning up dead shim" Oct 2 19:18:16.872636 env[1050]: time="2023-10-02T19:18:16.872592524Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2667 runtime=io.containerd.runc.v2\n" Oct 2 19:18:16.960154 env[1050]: time="2023-10-02T19:18:16.959614411Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:18:16.979174 kubelet[1941]: I1002 19:18:16.979133 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/02564458-81f3-44e1-8483-a355aa1ed954-registration-dir\") pod \"csi-node-driver-mc84r\" (UID: \"02564458-81f3-44e1-8483-a355aa1ed954\") " pod="calico-system/csi-node-driver-mc84r" Oct 2 19:18:16.979555 kubelet[1941]: I1002 19:18:16.979541 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2jzb7\" (UniqueName: \"kubernetes.io/projected/864a145b-347f-4161-a45a-6f121db1faac-kube-api-access-2jzb7\") pod \"calico-kube-controllers-7bd445fdb4-l2ttl\" (UID: \"864a145b-347f-4161-a45a-6f121db1faac\") " pod="calico-system/calico-kube-controllers-7bd445fdb4-l2ttl" Oct 2 19:18:16.979737 kubelet[1941]: I1002 19:18:16.979724 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/9dd4139f-313b-499c-a9dd-80100312b8ea-config-volume\") pod \"coredns-5d78c9869d-2m2k6\" (UID: \"9dd4139f-313b-499c-a9dd-80100312b8ea\") " pod="kube-system/coredns-5d78c9869d-2m2k6" Oct 2 19:18:16.979903 kubelet[1941]: I1002 19:18:16.979892 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kcdx2\" (UniqueName: \"kubernetes.io/projected/02564458-81f3-44e1-8483-a355aa1ed954-kube-api-access-kcdx2\") pod \"csi-node-driver-mc84r\" (UID: \"02564458-81f3-44e1-8483-a355aa1ed954\") " pod="calico-system/csi-node-driver-mc84r" Oct 2 19:18:16.980050 kubelet[1941]: I1002 19:18:16.980038 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2l6r8\" (UniqueName: \"kubernetes.io/projected/9dd4139f-313b-499c-a9dd-80100312b8ea-kube-api-access-2l6r8\") pod \"coredns-5d78c9869d-2m2k6\" (UID: \"9dd4139f-313b-499c-a9dd-80100312b8ea\") " pod="kube-system/coredns-5d78c9869d-2m2k6" Oct 2 19:18:16.980198 kubelet[1941]: I1002 19:18:16.980186 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/02564458-81f3-44e1-8483-a355aa1ed954-varrun\") pod \"csi-node-driver-mc84r\" (UID: \"02564458-81f3-44e1-8483-a355aa1ed954\") " pod="calico-system/csi-node-driver-mc84r" Oct 2 19:18:16.980373 kubelet[1941]: I1002 19:18:16.980361 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/02564458-81f3-44e1-8483-a355aa1ed954-socket-dir\") pod \"csi-node-driver-mc84r\" (UID: \"02564458-81f3-44e1-8483-a355aa1ed954\") " pod="calico-system/csi-node-driver-mc84r" Oct 2 19:18:16.980864 kubelet[1941]: I1002 19:18:16.980851 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/02564458-81f3-44e1-8483-a355aa1ed954-etccalico\") pod \"csi-node-driver-mc84r\" (UID: \"02564458-81f3-44e1-8483-a355aa1ed954\") " pod="calico-system/csi-node-driver-mc84r" Oct 2 19:18:16.984986 kubelet[1941]: I1002 19:18:16.984931 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/02564458-81f3-44e1-8483-a355aa1ed954-kubelet-dir\") pod \"csi-node-driver-mc84r\" (UID: \"02564458-81f3-44e1-8483-a355aa1ed954\") " pod="calico-system/csi-node-driver-mc84r" Oct 2 19:18:17.058955 env[1050]: time="2023-10-02T19:18:17.058790181Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-57tbk,Uid:cc29fcd6-91e6-49ec-97c8-fbc782faab7e,Namespace:kube-system,Attempt:0,}" Oct 2 19:18:17.135639 env[1050]: time="2023-10-02T19:18:17.133690233Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-mc84r,Uid:02564458-81f3-44e1-8483-a355aa1ed954,Namespace:calico-system,Attempt:0,}" Oct 2 19:18:17.295791 env[1050]: time="2023-10-02T19:18:17.295706430Z" level=error msg="Failed to destroy network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.296194 env[1050]: time="2023-10-02T19:18:17.296150215Z" level=error msg="encountered an error cleaning up failed sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.296238 env[1050]: time="2023-10-02T19:18:17.296214551Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-57tbk,Uid:cc29fcd6-91e6-49ec-97c8-fbc782faab7e,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.297877 kubelet[1941]: E1002 19:18:17.296513 1941 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.297877 kubelet[1941]: E1002 19:18:17.296582 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-57tbk" Oct 2 19:18:17.297877 kubelet[1941]: E1002 19:18:17.296610 1941 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-57tbk" Oct 2 19:18:17.298023 kubelet[1941]: E1002 19:18:17.296673 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-57tbk_kube-system(cc29fcd6-91e6-49ec-97c8-fbc782faab7e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-57tbk_kube-system(cc29fcd6-91e6-49ec-97c8-fbc782faab7e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-57tbk" podUID=cc29fcd6-91e6-49ec-97c8-fbc782faab7e Oct 2 19:18:17.308619 env[1050]: time="2023-10-02T19:18:17.308537106Z" level=error msg="Failed to destroy network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.309054 env[1050]: time="2023-10-02T19:18:17.309006787Z" level=error msg="encountered an error cleaning up failed sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.310801 env[1050]: time="2023-10-02T19:18:17.309081171Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-mc84r,Uid:02564458-81f3-44e1-8483-a355aa1ed954,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.310857 kubelet[1941]: E1002 19:18:17.309418 1941 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.310857 kubelet[1941]: E1002 19:18:17.309476 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-mc84r" Oct 2 19:18:17.310857 kubelet[1941]: E1002 19:18:17.309504 1941 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-mc84r" Oct 2 19:18:17.311090 kubelet[1941]: E1002 19:18:17.309589 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-mc84r_calico-system(02564458-81f3-44e1-8483-a355aa1ed954)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-mc84r_calico-system(02564458-81f3-44e1-8483-a355aa1ed954)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-mc84r" podUID=02564458-81f3-44e1-8483-a355aa1ed954 Oct 2 19:18:17.414142 env[1050]: time="2023-10-02T19:18:17.413956453Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bd445fdb4-l2ttl,Uid:864a145b-347f-4161-a45a-6f121db1faac,Namespace:calico-system,Attempt:0,}" Oct 2 19:18:17.435185 env[1050]: time="2023-10-02T19:18:17.435113279Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-2m2k6,Uid:9dd4139f-313b-499c-a9dd-80100312b8ea,Namespace:kube-system,Attempt:0,}" Oct 2 19:18:17.540147 env[1050]: time="2023-10-02T19:18:17.540056064Z" level=error msg="Failed to destroy network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.541147 env[1050]: time="2023-10-02T19:18:17.541064562Z" level=error msg="encountered an error cleaning up failed sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.541200 env[1050]: time="2023-10-02T19:18:17.541169201Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bd445fdb4-l2ttl,Uid:864a145b-347f-4161-a45a-6f121db1faac,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.541582 kubelet[1941]: E1002 19:18:17.541554 1941 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.541670 kubelet[1941]: E1002 19:18:17.541631 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7bd445fdb4-l2ttl" Oct 2 19:18:17.541714 kubelet[1941]: E1002 19:18:17.541673 1941 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7bd445fdb4-l2ttl" Oct 2 19:18:17.541793 kubelet[1941]: E1002 19:18:17.541752 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7bd445fdb4-l2ttl_calico-system(864a145b-347f-4161-a45a-6f121db1faac)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7bd445fdb4-l2ttl_calico-system(864a145b-347f-4161-a45a-6f121db1faac)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7bd445fdb4-l2ttl" podUID=864a145b-347f-4161-a45a-6f121db1faac Oct 2 19:18:17.574137 env[1050]: time="2023-10-02T19:18:17.574073749Z" level=error msg="Failed to destroy network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.574748 env[1050]: time="2023-10-02T19:18:17.574714070Z" level=error msg="encountered an error cleaning up failed sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.574889 env[1050]: time="2023-10-02T19:18:17.574859082Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-2m2k6,Uid:9dd4139f-313b-499c-a9dd-80100312b8ea,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.575553 kubelet[1941]: E1002 19:18:17.575280 1941 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:17.575553 kubelet[1941]: E1002 19:18:17.575342 1941 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-2m2k6" Oct 2 19:18:17.575553 kubelet[1941]: E1002 19:18:17.575403 1941 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-2m2k6" Oct 2 19:18:17.575723 kubelet[1941]: E1002 19:18:17.575507 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-2m2k6_kube-system(9dd4139f-313b-499c-a9dd-80100312b8ea)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-2m2k6_kube-system(9dd4139f-313b-499c-a9dd-80100312b8ea)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-2m2k6" podUID=9dd4139f-313b-499c-a9dd-80100312b8ea Oct 2 19:18:17.671610 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb-shm.mount: Deactivated successfully. Oct 2 19:18:17.964694 kubelet[1941]: I1002 19:18:17.964091 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:17.966998 env[1050]: time="2023-10-02T19:18:17.966718200Z" level=info msg="StopPodSandbox for \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\"" Oct 2 19:18:17.976460 kubelet[1941]: I1002 19:18:17.976170 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:17.977515 env[1050]: time="2023-10-02T19:18:17.977449300Z" level=info msg="StopPodSandbox for \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\"" Oct 2 19:18:18.004831 kubelet[1941]: I1002 19:18:18.004765 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:18.009286 env[1050]: time="2023-10-02T19:18:18.007558652Z" level=info msg="StopPodSandbox for \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\"" Oct 2 19:18:18.014012 kubelet[1941]: I1002 19:18:18.013930 1941 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:18.019787 env[1050]: time="2023-10-02T19:18:18.019489383Z" level=info msg="StopPodSandbox for \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\"" Oct 2 19:18:18.102119 env[1050]: time="2023-10-02T19:18:18.102028746Z" level=error msg="StopPodSandbox for \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\" failed" error="failed to destroy network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:18.102818 kubelet[1941]: E1002 19:18:18.102777 1941 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:18.102954 kubelet[1941]: E1002 19:18:18.102934 1941 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f} Oct 2 19:18:18.102998 kubelet[1941]: E1002 19:18:18.102984 1941 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"864a145b-347f-4161-a45a-6f121db1faac\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:18:18.103087 kubelet[1941]: E1002 19:18:18.103044 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"864a145b-347f-4161-a45a-6f121db1faac\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7bd445fdb4-l2ttl" podUID=864a145b-347f-4161-a45a-6f121db1faac Oct 2 19:18:18.105545 env[1050]: time="2023-10-02T19:18:18.105496522Z" level=error msg="StopPodSandbox for \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\" failed" error="failed to destroy network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:18.105878 kubelet[1941]: E1002 19:18:18.105849 1941 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:18.105957 kubelet[1941]: E1002 19:18:18.105884 1941 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12} Oct 2 19:18:18.105957 kubelet[1941]: E1002 19:18:18.105944 1941 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"02564458-81f3-44e1-8483-a355aa1ed954\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:18:18.106114 kubelet[1941]: E1002 19:18:18.106007 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"02564458-81f3-44e1-8483-a355aa1ed954\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-mc84r" podUID=02564458-81f3-44e1-8483-a355aa1ed954 Oct 2 19:18:18.113566 env[1050]: time="2023-10-02T19:18:18.113502377Z" level=error msg="StopPodSandbox for \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\" failed" error="failed to destroy network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:18.113868 kubelet[1941]: E1002 19:18:18.113838 1941 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:18.113936 kubelet[1941]: E1002 19:18:18.113898 1941 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb} Oct 2 19:18:18.113990 kubelet[1941]: E1002 19:18:18.113953 1941 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cc29fcd6-91e6-49ec-97c8-fbc782faab7e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:18:18.114087 kubelet[1941]: E1002 19:18:18.114014 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cc29fcd6-91e6-49ec-97c8-fbc782faab7e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-57tbk" podUID=cc29fcd6-91e6-49ec-97c8-fbc782faab7e Oct 2 19:18:18.125334 env[1050]: time="2023-10-02T19:18:18.125257579Z" level=error msg="StopPodSandbox for \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\" failed" error="failed to destroy network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:18:18.125602 kubelet[1941]: E1002 19:18:18.125557 1941 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:18.125679 kubelet[1941]: E1002 19:18:18.125617 1941 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6} Oct 2 19:18:18.125724 kubelet[1941]: E1002 19:18:18.125689 1941 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9dd4139f-313b-499c-a9dd-80100312b8ea\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:18:18.125801 kubelet[1941]: E1002 19:18:18.125736 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9dd4139f-313b-499c-a9dd-80100312b8ea\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-2m2k6" podUID=9dd4139f-313b-499c-a9dd-80100312b8ea Oct 2 19:18:23.451850 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1980606997.mount: Deactivated successfully. Oct 2 19:18:23.952533 env[1050]: time="2023-10-02T19:18:23.952448147Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:23.957572 env[1050]: time="2023-10-02T19:18:23.955784722Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:23.961508 env[1050]: time="2023-10-02T19:18:23.959967475Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:23.965484 env[1050]: time="2023-10-02T19:18:23.965358777Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e\"" Oct 2 19:18:23.965785 env[1050]: time="2023-10-02T19:18:23.963627240Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:23.976068 env[1050]: time="2023-10-02T19:18:23.975925741Z" level=info msg="CreateContainer within sandbox \"bae4723c36c0082bd72f6a5c072756cd0abba785defcb2d28bc3c420979a90e3\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:18:24.006991 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount523599437.mount: Deactivated successfully. Oct 2 19:18:24.020001 env[1050]: time="2023-10-02T19:18:24.019913158Z" level=info msg="CreateContainer within sandbox \"bae4723c36c0082bd72f6a5c072756cd0abba785defcb2d28bc3c420979a90e3\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea\"" Oct 2 19:18:24.025530 env[1050]: time="2023-10-02T19:18:24.022845349Z" level=info msg="StartContainer for \"6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea\"" Oct 2 19:18:24.073337 systemd[1]: Started cri-containerd-6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea.scope. Oct 2 19:18:24.097000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.099413 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 19:18:24.099476 kernel: audit: type=1400 audit(1696274304.097:1116): avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.097000 audit[2904]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2369 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:24.107643 kernel: audit: type=1300 audit(1696274304.097:1116): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2369 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:24.107688 kernel: audit: type=1327 audit(1696274304.097:1116): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303638353739396464323736316632303965343862346632663636 Oct 2 19:18:24.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303638353739396464323736316632303965343862346632663636 Oct 2 19:18:24.112214 kernel: audit: type=1400 audit(1696274304.098:1117): avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115497 kernel: audit: type=1400 audit(1696274304.098:1117): avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.118941 kernel: audit: type=1400 audit(1696274304.098:1117): avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.125539 kernel: audit: type=1400 audit(1696274304.098:1117): avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.129170 kernel: audit: type=1400 audit(1696274304.098:1117): avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.137494 kernel: audit: type=1400 audit(1696274304.098:1117): avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.137563 kernel: audit: type=1400 audit(1696274304.098:1117): avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.098000 audit: BPF prog-id=145 op=LOAD Oct 2 19:18:24.098000 audit[2904]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002d7be0 items=0 ppid=2369 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:24.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303638353739396464323736316632303965343862346632663636 Oct 2 19:18:24.102000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.102000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.102000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.102000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.102000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.102000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.102000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.102000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.102000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.102000 audit: BPF prog-id=146 op=LOAD Oct 2 19:18:24.102000 audit[2904]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002d7c28 items=0 ppid=2369 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:24.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303638353739396464323736316632303965343862346632663636 Oct 2 19:18:24.115000 audit: BPF prog-id=146 op=UNLOAD Oct 2 19:18:24.115000 audit: BPF prog-id=145 op=UNLOAD Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { perfmon } for pid=2904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit[2904]: AVC avc: denied { bpf } for pid=2904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:24.115000 audit: BPF prog-id=147 op=LOAD Oct 2 19:18:24.115000 audit[2904]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002d7cb8 items=0 ppid=2369 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:24.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303638353739396464323736316632303965343862346632663636 Oct 2 19:18:24.154730 env[1050]: time="2023-10-02T19:18:24.154679804Z" level=info msg="StartContainer for \"6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea\" returns successfully" Oct 2 19:18:24.254666 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:18:24.255042 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:18:25.253923 systemd[1]: run-containerd-runc-k8s.io-6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea-runc.iNA61F.mount: Deactivated successfully. Oct 2 19:18:25.705000 audit[3022]: AVC avc: denied { write } for pid=3022 comm="tee" name="fd" dev="proc" ino=26728 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:18:25.705000 audit[3022]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff9ab24967 a2=241 a3=1b6 items=1 ppid=2994 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:25.705000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:18:25.705000 audit: PATH item=0 name="/dev/fd/63" inode=26723 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:18:25.705000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:18:25.752000 audit[3035]: AVC avc: denied { write } for pid=3035 comm="tee" name="fd" dev="proc" ino=26747 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:18:25.752000 audit[3035]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdeb031955 a2=241 a3=1b6 items=1 ppid=3000 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:25.752000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:18:25.752000 audit: PATH item=0 name="/dev/fd/63" inode=25709 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:18:25.752000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:18:25.753000 audit[3037]: AVC avc: denied { write } for pid=3037 comm="tee" name="fd" dev="proc" ino=26751 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:18:25.753000 audit[3037]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe9c7f5956 a2=241 a3=1b6 items=1 ppid=2993 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:25.753000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:18:25.753000 audit: PATH item=0 name="/dev/fd/63" inode=25712 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:18:25.753000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:18:25.756000 audit[3040]: AVC avc: denied { write } for pid=3040 comm="tee" name="fd" dev="proc" ino=26755 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:18:25.756000 audit[3040]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffaab50965 a2=241 a3=1b6 items=1 ppid=3004 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:25.756000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:18:25.756000 audit: PATH item=0 name="/dev/fd/63" inode=25713 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:18:25.756000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:18:25.758000 audit[3053]: AVC avc: denied { write } for pid=3053 comm="tee" name="fd" dev="proc" ino=26759 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:18:25.758000 audit[3053]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffd1d4f965 a2=241 a3=1b6 items=1 ppid=2997 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:25.758000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:18:25.758000 audit: PATH item=0 name="/dev/fd/63" inode=25717 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:18:25.758000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:18:25.776000 audit[3058]: AVC avc: denied { write } for pid=3058 comm="tee" name="fd" dev="proc" ino=25730 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:18:25.789000 audit[3064]: AVC avc: denied { write } for pid=3064 comm="tee" name="fd" dev="proc" ino=25736 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:18:25.776000 audit[3058]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffeec158966 a2=241 a3=1b6 items=1 ppid=2995 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:25.776000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:18:25.776000 audit: PATH item=0 name="/dev/fd/63" inode=25718 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:18:25.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:18:25.789000 audit[3064]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcc28e4965 a2=241 a3=1b6 items=1 ppid=3002 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:25.789000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:18:25.789000 audit: PATH item=0 name="/dev/fd/63" inode=25727 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:18:25.789000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:18:26.077137 systemd[1]: run-containerd-runc-k8s.io-6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea-runc.vPPgyG.mount: Deactivated successfully. Oct 2 19:18:26.261000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.261000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.261000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.261000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.261000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.261000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.261000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.261000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.261000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.261000 audit: BPF prog-id=148 op=LOAD Oct 2 19:18:26.261000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe079d3d60 a2=70 a3=7f2694822000 items=0 ppid=3003 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.261000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:18:26.262000 audit: BPF prog-id=148 op=UNLOAD Oct 2 19:18:26.262000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.262000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.262000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.262000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.262000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.262000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.262000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.262000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.262000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.262000 audit: BPF prog-id=149 op=LOAD Oct 2 19:18:26.262000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe079d3d60 a2=70 a3=6e items=0 ppid=3003 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.262000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:18:26.264000 audit: BPF prog-id=149 op=UNLOAD Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe079d3d10 a2=70 a3=470860 items=0 ppid=3003 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.264000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.264000 audit: BPF prog-id=150 op=LOAD Oct 2 19:18:26.264000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe079d3cf0 a2=70 a3=7ffe079d3d60 items=0 ppid=3003 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.264000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:18:26.265000 audit: BPF prog-id=150 op=UNLOAD Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe079d3dd0 a2=70 a3=0 items=0 ppid=3003 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.266000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe079d3dc0 a2=70 a3=0 items=0 ppid=3003 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.266000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe079d3e00 a2=70 a3=fe00 items=0 ppid=3003 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.266000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.266000 audit: BPF prog-id=151 op=LOAD Oct 2 19:18:26.266000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe079d3d20 a2=70 a3=ffffffff items=0 ppid=3003 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.266000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:18:26.272000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.272000 audit[3156]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff936923c0 a2=70 a3=ffff items=0 ppid=3003 pid=3156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.272000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:18:26.272000 audit[3156]: AVC avc: denied { bpf } for pid=3156 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:26.272000 audit[3156]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff93692290 a2=70 a3=3 items=0 ppid=3003 pid=3156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.272000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:18:26.279000 audit: BPF prog-id=151 op=UNLOAD Oct 2 19:18:26.279000 audit[976]: SYSCALL arch=c000003e syscall=47 success=yes exit=596 a0=3 a1=7ffc6d72a530 a2=22 a3=7ffc6d72a7a0 items=0 ppid=1 pid=976 auid=4294967295 uid=244 gid=244 euid=244 suid=244 fsuid=244 egid=244 sgid=244 fsgid=244 tty=(none) ses=4294967295 comm="systemd-network" exe="/usr/lib/systemd/systemd-networkd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.279000 audit: SOCKADDR saddr=100000000000000001000000 Oct 2 19:18:26.279000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-networkd" Oct 2 19:18:26.400000 audit[3179]: NETFILTER_CFG table=nat:97 family=2 entries=16 op=nft_register_chain pid=3179 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:26.400000 audit[3179]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffc09196160 a2=0 a3=7ffc0919614c items=0 ppid=3003 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.400000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:26.410000 audit[3181]: NETFILTER_CFG table=raw:98 family=2 entries=19 op=nft_register_chain pid=3181 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:26.410000 audit[3181]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffc86ee9450 a2=0 a3=0 items=0 ppid=3003 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.410000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:26.411000 audit[3180]: NETFILTER_CFG table=filter:99 family=2 entries=39 op=nft_register_chain pid=3180 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:26.411000 audit[3180]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7fff9fd2a4c0 a2=0 a3=0 items=0 ppid=3003 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.411000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:26.415000 audit[3182]: NETFILTER_CFG table=mangle:100 family=2 entries=19 op=nft_register_chain pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:26.415000 audit[3182]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffdb47f6f00 a2=0 a3=7ffdb47f6eec items=0 ppid=3003 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:26.415000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:27.168204 systemd-networkd[976]: vxlan.calico: Link UP Oct 2 19:18:27.169299 systemd-networkd[976]: vxlan.calico: Gained carrier Oct 2 19:18:28.505977 systemd-networkd[976]: vxlan.calico: Gained IPv6LL Oct 2 19:18:29.181696 systemd[1]: run-containerd-runc-k8s.io-6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea-runc.MTqqvS.mount: Deactivated successfully. Oct 2 19:18:29.314186 kubelet[1941]: I1002 19:18:29.314124 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-tpm8v" podStartSLOduration=6.653239001 podCreationTimestamp="2023-10-02 19:17:58 +0000 UTC" firstStartedPulling="2023-10-02 19:17:59.311414822 +0000 UTC m=+22.749290746" lastFinishedPulling="2023-10-02 19:18:23.966264044 +0000 UTC m=+47.404139998" observedRunningTime="2023-10-02 19:18:25.261881479 +0000 UTC m=+48.699757422" watchObservedRunningTime="2023-10-02 19:18:29.308088253 +0000 UTC m=+52.745964156" Oct 2 19:18:30.789747 env[1050]: time="2023-10-02T19:18:30.789601531Z" level=info msg="StopPodSandbox for \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\"" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:30.948 [INFO][3257] k8s.go 576: Cleaning up netns ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:30.958 [INFO][3257] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" iface="eth0" netns="/var/run/netns/cni-011e3f17-52f7-f60a-07ce-b65c1fb36aa4" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:30.959 [INFO][3257] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" iface="eth0" netns="/var/run/netns/cni-011e3f17-52f7-f60a-07ce-b65c1fb36aa4" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:30.960 [INFO][3257] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" iface="eth0" netns="/var/run/netns/cni-011e3f17-52f7-f60a-07ce-b65c1fb36aa4" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:30.961 [INFO][3257] k8s.go 583: Releasing IP address(es) ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:30.961 [INFO][3257] utils.go 196: Calico CNI releasing IP address ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:31.280 [INFO][3263] ipam_plugin.go 416: Releasing address using handleID ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" HandleID="k8s-pod-network.80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.323255 env[1050]: time="2023-10-02T19:18:31Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:31.323255 env[1050]: time="2023-10-02T19:18:31Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:31.312 [WARNING][3263] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" HandleID="k8s-pod-network.80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:31.312 [INFO][3263] ipam_plugin.go 444: Releasing address using workloadID ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" HandleID="k8s-pod-network.80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.323255 env[1050]: time="2023-10-02T19:18:31Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:31.323255 env[1050]: 2023-10-02 19:18:31.320 [INFO][3257] k8s.go 589: Teardown processing complete. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:31.328649 env[1050]: time="2023-10-02T19:18:31.328572573Z" level=info msg="TearDown network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\" successfully" Oct 2 19:18:31.328867 env[1050]: time="2023-10-02T19:18:31.328821633Z" level=info msg="StopPodSandbox for \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\" returns successfully" Oct 2 19:18:31.329822 systemd[1]: run-netns-cni\x2d011e3f17\x2d52f7\x2df60a\x2d07ce\x2db65c1fb36aa4.mount: Deactivated successfully. Oct 2 19:18:31.334892 env[1050]: time="2023-10-02T19:18:31.334833010Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-2m2k6,Uid:9dd4139f-313b-499c-a9dd-80100312b8ea,Namespace:kube-system,Attempt:1,}" Oct 2 19:18:31.373729 kernel: kauditd_printk_skb: 154 callbacks suppressed Oct 2 19:18:31.373984 kernel: audit: type=1400 audit(1696274311.365:1147): avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:31.365000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:31.365000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:31.365000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c804c0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:31.405013 kernel: audit: type=1400 audit(1696274311.365:1148): avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:31.405144 kernel: audit: type=1300 audit(1696274311.365:1148): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c804c0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:31.405209 kernel: audit: type=1327 audit(1696274311.365:1148): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:31.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:31.365000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d11fb0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:31.415760 kernel: audit: type=1300 audit(1696274311.365:1147): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d11fb0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:31.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:31.427535 kernel: audit: type=1327 audit(1696274311.365:1147): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:31.599499 systemd-networkd[976]: calic2615a3d40a: Link UP Oct 2 19:18:31.601427 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic2615a3d40a: link becomes ready Oct 2 19:18:31.602287 systemd-networkd[976]: calic2615a3d40a: Gained carrier Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.474 [INFO][3269] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0 coredns-5d78c9869d- kube-system 9dd4139f-313b-499c-a9dd-80100312b8ea 718 0 2023-10-02 19:17:52 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-0-9-a7fded3d8e.novalocal coredns-5d78c9869d-2m2k6 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic2615a3d40a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Namespace="kube-system" Pod="coredns-5d78c9869d-2m2k6" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.475 [INFO][3269] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Namespace="kube-system" Pod="coredns-5d78c9869d-2m2k6" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.509 [INFO][3280] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" HandleID="k8s-pod-network.d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.523 [INFO][3280] ipam_plugin.go 269: Auto assigning IP ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" HandleID="k8s-pod-network.d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00010d110), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-0-9-a7fded3d8e.novalocal", "pod":"coredns-5d78c9869d-2m2k6", "timestamp":"2023-10-02 19:18:31.508985283 +0000 UTC"}, Hostname:"ci-3510-3-0-9-a7fded3d8e.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:18:31.619361 env[1050]: time="2023-10-02T19:18:31Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:31.619361 env[1050]: time="2023-10-02T19:18:31Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.523 [INFO][3280] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-9-a7fded3d8e.novalocal' Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.529 [INFO][3280] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.542 [INFO][3280] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.549 [INFO][3280] ipam.go 489: Trying affinity for 192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.558 [INFO][3280] ipam.go 155: Attempting to load block cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.564 [INFO][3280] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.565 [INFO][3280] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.28.128/26 handle="k8s-pod-network.d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.567 [INFO][3280] ipam.go 1682: Creating new handle: k8s-pod-network.d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.572 [INFO][3280] ipam.go 1203: Writing block in order to claim IPs block=192.168.28.128/26 handle="k8s-pod-network.d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.579 [INFO][3280] ipam.go 1216: Successfully claimed IPs: [192.168.28.129/26] block=192.168.28.128/26 handle="k8s-pod-network.d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.579 [INFO][3280] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.28.129/26] handle="k8s-pod-network.d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:31.619361 env[1050]: time="2023-10-02T19:18:31Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:31.619361 env[1050]: 2023-10-02 19:18:31.579 [INFO][3280] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.28.129/26] IPv6=[] ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" HandleID="k8s-pod-network.d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.621302 env[1050]: 2023-10-02 19:18:31.584 [INFO][3269] k8s.go 383: Populated endpoint ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Namespace="kube-system" Pod="coredns-5d78c9869d-2m2k6" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"9dd4139f-313b-499c-a9dd-80100312b8ea", ResourceVersion:"718", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"", Pod:"coredns-5d78c9869d-2m2k6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic2615a3d40a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:31.621302 env[1050]: 2023-10-02 19:18:31.585 [INFO][3269] k8s.go 384: Calico CNI using IPs: [192.168.28.129/32] ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Namespace="kube-system" Pod="coredns-5d78c9869d-2m2k6" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.621302 env[1050]: 2023-10-02 19:18:31.585 [INFO][3269] dataplane_linux.go 68: Setting the host side veth name to calic2615a3d40a ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Namespace="kube-system" Pod="coredns-5d78c9869d-2m2k6" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.621302 env[1050]: 2023-10-02 19:18:31.586 [INFO][3269] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Namespace="kube-system" Pod="coredns-5d78c9869d-2m2k6" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.621302 env[1050]: 2023-10-02 19:18:31.602 [INFO][3269] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Namespace="kube-system" Pod="coredns-5d78c9869d-2m2k6" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"9dd4139f-313b-499c-a9dd-80100312b8ea", ResourceVersion:"718", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd", Pod:"coredns-5d78c9869d-2m2k6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic2615a3d40a", MAC:"f6:7e:d5:fd:39:ae", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:31.621302 env[1050]: 2023-10-02 19:18:31.616 [INFO][3269] k8s.go 489: Wrote updated endpoint to datastore ContainerID="d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd" Namespace="kube-system" Pod="coredns-5d78c9869d-2m2k6" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:31.640399 env[1050]: time="2023-10-02T19:18:31.640291223Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:18:31.640617 env[1050]: time="2023-10-02T19:18:31.640367975Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:18:31.640617 env[1050]: time="2023-10-02T19:18:31.640430781Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:18:31.640951 env[1050]: time="2023-10-02T19:18:31.640844346Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd pid=3304 runtime=io.containerd.runc.v2 Oct 2 19:18:31.666221 systemd[1]: Started cri-containerd-d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd.scope. Oct 2 19:18:31.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.694530 kernel: audit: type=1400 audit(1696274311.687:1149): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.700812 kernel: audit: type=1400 audit(1696274311.687:1150): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.707487 kernel: audit: type=1400 audit(1696274311.687:1151): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.688000 audit: BPF prog-id=152 op=LOAD Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3304 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.713525 kernel: audit: type=1400 audit(1696274311.687:1152): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433386333616433353838646361616639343837363663373761653230 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3304 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433386333616433353838646361616639343837363663373761653230 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit: BPF prog-id=153 op=LOAD Oct 2 19:18:31.693000 audit[3315]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024df0 items=0 ppid=3304 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433386333616433353838646361616639343837363663373761653230 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit: BPF prog-id=154 op=LOAD Oct 2 19:18:31.693000 audit[3315]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024e38 items=0 ppid=3304 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433386333616433353838646361616639343837363663373761653230 Oct 2 19:18:31.693000 audit: BPF prog-id=154 op=UNLOAD Oct 2 19:18:31.693000 audit: BPF prog-id=153 op=UNLOAD Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.693000 audit: BPF prog-id=155 op=LOAD Oct 2 19:18:31.693000 audit[3315]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025248 items=0 ppid=3304 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433386333616433353838646361616639343837363663373761653230 Oct 2 19:18:31.714000 audit[3336]: NETFILTER_CFG table=filter:101 family=2 entries=36 op=nft_register_chain pid=3336 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:31.714000 audit[3336]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffed0773ed0 a2=0 a3=7ffed0773ebc items=0 ppid=3003 pid=3336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.714000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:31.745510 env[1050]: time="2023-10-02T19:18:31.745362968Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-2m2k6,Uid:9dd4139f-313b-499c-a9dd-80100312b8ea,Namespace:kube-system,Attempt:1,} returns sandbox id \"d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd\"" Oct 2 19:18:31.750673 env[1050]: time="2023-10-02T19:18:31.750631723Z" level=info msg="CreateContainer within sandbox \"d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:18:31.769800 env[1050]: time="2023-10-02T19:18:31.769748097Z" level=info msg="CreateContainer within sandbox \"d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"99e68b44bd2ea112d116ad06ecdb4dfc6d7ee272bb2cbeb7ee281679801e71b2\"" Oct 2 19:18:31.770778 env[1050]: time="2023-10-02T19:18:31.770753345Z" level=info msg="StartContainer for \"99e68b44bd2ea112d116ad06ecdb4dfc6d7ee272bb2cbeb7ee281679801e71b2\"" Oct 2 19:18:31.786677 env[1050]: time="2023-10-02T19:18:31.786632527Z" level=info msg="StopPodSandbox for \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\"" Oct 2 19:18:31.793180 systemd[1]: Started cri-containerd-99e68b44bd2ea112d116ad06ecdb4dfc6d7ee272bb2cbeb7ee281679801e71b2.scope. Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.813000 audit: BPF prog-id=156 op=LOAD Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3304 pid=3351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939653638623434626432656131313264313136616430366563646234 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3304 pid=3351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939653638623434626432656131313264313136616430366563646234 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.814000 audit: BPF prog-id=157 op=LOAD Oct 2 19:18:31.814000 audit[3351]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000216530 items=0 ppid=3304 pid=3351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939653638623434626432656131313264313136616430366563646234 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit: BPF prog-id=158 op=LOAD Oct 2 19:18:31.815000 audit[3351]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000216578 items=0 ppid=3304 pid=3351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939653638623434626432656131313264313136616430366563646234 Oct 2 19:18:31.815000 audit: BPF prog-id=158 op=UNLOAD Oct 2 19:18:31.815000 audit: BPF prog-id=157 op=UNLOAD Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { perfmon } for pid=3351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit[3351]: AVC avc: denied { bpf } for pid=3351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:31.815000 audit: BPF prog-id=159 op=LOAD Oct 2 19:18:31.815000 audit[3351]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000216988 items=0 ppid=3304 pid=3351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939653638623434626432656131313264313136616430366563646234 Oct 2 19:18:31.858039 env[1050]: time="2023-10-02T19:18:31.853663548Z" level=info msg="StartContainer for \"99e68b44bd2ea112d116ad06ecdb4dfc6d7ee272bb2cbeb7ee281679801e71b2\" returns successfully" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.890 [INFO][3377] k8s.go 576: Cleaning up netns ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.891 [INFO][3377] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" iface="eth0" netns="/var/run/netns/cni-4c401809-cb0d-ced1-1bf6-83fdd63ac279" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.891 [INFO][3377] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" iface="eth0" netns="/var/run/netns/cni-4c401809-cb0d-ced1-1bf6-83fdd63ac279" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.891 [INFO][3377] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" iface="eth0" netns="/var/run/netns/cni-4c401809-cb0d-ced1-1bf6-83fdd63ac279" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.891 [INFO][3377] k8s.go 583: Releasing IP address(es) ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.891 [INFO][3377] utils.go 196: Calico CNI releasing IP address ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.919 [INFO][3394] ipam_plugin.go 416: Releasing address using handleID ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" HandleID="k8s-pod-network.3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:31.933066 env[1050]: time="2023-10-02T19:18:31Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:31.933066 env[1050]: time="2023-10-02T19:18:31Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.927 [WARNING][3394] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" HandleID="k8s-pod-network.3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.928 [INFO][3394] ipam_plugin.go 444: Releasing address using workloadID ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" HandleID="k8s-pod-network.3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:31.933066 env[1050]: time="2023-10-02T19:18:31Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:31.933066 env[1050]: 2023-10-02 19:18:31.931 [INFO][3377] k8s.go 589: Teardown processing complete. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:31.933943 env[1050]: time="2023-10-02T19:18:31.933903287Z" level=info msg="TearDown network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\" successfully" Oct 2 19:18:31.934020 env[1050]: time="2023-10-02T19:18:31.934002480Z" level=info msg="StopPodSandbox for \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\" returns successfully" Oct 2 19:18:31.934868 env[1050]: time="2023-10-02T19:18:31.934843955Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-mc84r,Uid:02564458-81f3-44e1-8483-a355aa1ed954,Namespace:calico-system,Attempt:1,}" Oct 2 19:18:32.138618 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0c622c36ed4: link becomes ready Oct 2 19:18:32.147427 systemd-networkd[976]: cali0c622c36ed4: Link UP Oct 2 19:18:32.147435 systemd-networkd[976]: cali0c622c36ed4: Gained carrier Oct 2 19:18:32.157000 audit[3424]: NETFILTER_CFG table=filter:102 family=2 entries=14 op=nft_register_rule pid=3424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:32.157000 audit[3424]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffebb7ca340 a2=0 a3=7ffebb7ca32c items=0 ppid=2123 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:32.157000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:32.164252 kubelet[1941]: I1002 19:18:32.164206 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-2m2k6" podStartSLOduration=40.164116001 podCreationTimestamp="2023-10-02 19:17:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:18:32.097004658 +0000 UTC m=+55.534880561" watchObservedRunningTime="2023-10-02 19:18:32.164116001 +0000 UTC m=+55.601991914" Oct 2 19:18:32.159000 audit[3424]: NETFILTER_CFG table=nat:103 family=2 entries=14 op=nft_register_rule pid=3424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:32.159000 audit[3424]: SYSCALL arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7ffebb7ca340 a2=0 a3=73696874203a4554 items=0 ppid=2123 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:32.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.010 [INFO][3403] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0 csi-node-driver- calico-system 02564458-81f3-44e1-8483-a355aa1ed954 728 0 2023-10-02 19:18:16 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:759544bff5 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510-3-0-9-a7fded3d8e.novalocal csi-node-driver-mc84r eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali0c622c36ed4 [] []}} ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Namespace="calico-system" Pod="csi-node-driver-mc84r" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.010 [INFO][3403] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Namespace="calico-system" Pod="csi-node-driver-mc84r" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.058 [INFO][3415] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" HandleID="k8s-pod-network.b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.072 [INFO][3415] ipam_plugin.go 269: Auto assigning IP ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" HandleID="k8s-pod-network.b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004d7e0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-0-9-a7fded3d8e.novalocal", "pod":"csi-node-driver-mc84r", "timestamp":"2023-10-02 19:18:32.058522314 +0000 UTC"}, Hostname:"ci-3510-3-0-9-a7fded3d8e.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:18:32.172278 env[1050]: time="2023-10-02T19:18:32Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:32.172278 env[1050]: time="2023-10-02T19:18:32Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.073 [INFO][3415] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-9-a7fded3d8e.novalocal' Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.080 [INFO][3415] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.101 [INFO][3415] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.112 [INFO][3415] ipam.go 489: Trying affinity for 192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.114 [INFO][3415] ipam.go 155: Attempting to load block cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.117 [INFO][3415] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.118 [INFO][3415] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.28.128/26 handle="k8s-pod-network.b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.120 [INFO][3415] ipam.go 1682: Creating new handle: k8s-pod-network.b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406 Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.125 [INFO][3415] ipam.go 1203: Writing block in order to claim IPs block=192.168.28.128/26 handle="k8s-pod-network.b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.132 [INFO][3415] ipam.go 1216: Successfully claimed IPs: [192.168.28.130/26] block=192.168.28.128/26 handle="k8s-pod-network.b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.132 [INFO][3415] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.28.130/26] handle="k8s-pod-network.b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:32.172278 env[1050]: time="2023-10-02T19:18:32Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:32.172278 env[1050]: 2023-10-02 19:18:32.132 [INFO][3415] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.28.130/26] IPv6=[] ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" HandleID="k8s-pod-network.b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:32.173326 env[1050]: 2023-10-02 19:18:32.134 [INFO][3403] k8s.go 383: Populated endpoint ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Namespace="calico-system" Pod="csi-node-driver-mc84r" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"02564458-81f3-44e1-8483-a355aa1ed954", ResourceVersion:"728", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 18, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"", Pod:"csi-node-driver-mc84r", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.28.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali0c622c36ed4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:32.173326 env[1050]: 2023-10-02 19:18:32.134 [INFO][3403] k8s.go 384: Calico CNI using IPs: [192.168.28.130/32] ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Namespace="calico-system" Pod="csi-node-driver-mc84r" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:32.173326 env[1050]: 2023-10-02 19:18:32.134 [INFO][3403] dataplane_linux.go 68: Setting the host side veth name to cali0c622c36ed4 ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Namespace="calico-system" Pod="csi-node-driver-mc84r" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:32.173326 env[1050]: 2023-10-02 19:18:32.138 [INFO][3403] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Namespace="calico-system" Pod="csi-node-driver-mc84r" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:32.173326 env[1050]: 2023-10-02 19:18:32.147 [INFO][3403] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Namespace="calico-system" Pod="csi-node-driver-mc84r" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"02564458-81f3-44e1-8483-a355aa1ed954", ResourceVersion:"728", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 18, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406", Pod:"csi-node-driver-mc84r", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.28.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali0c622c36ed4", MAC:"5a:22:d3:a2:5d:01", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:32.173326 env[1050]: 2023-10-02 19:18:32.167 [INFO][3403] k8s.go 489: Wrote updated endpoint to datastore ContainerID="b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406" Namespace="calico-system" Pod="csi-node-driver-mc84r" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:32.207674 env[1050]: time="2023-10-02T19:18:32.207592744Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:18:32.207935 env[1050]: time="2023-10-02T19:18:32.207910672Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:18:32.208037 env[1050]: time="2023-10-02T19:18:32.208011189Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:18:32.208279 env[1050]: time="2023-10-02T19:18:32.208252424Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406 pid=3445 runtime=io.containerd.runc.v2 Oct 2 19:18:32.215000 audit[3462]: NETFILTER_CFG table=filter:104 family=2 entries=40 op=nft_register_chain pid=3462 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:32.215000 audit[3462]: SYSCALL arch=c000003e syscall=46 success=yes exit=21096 a0=3 a1=7fffdc8a7940 a2=0 a3=7fffdc8a792c items=0 ppid=3003 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:32.215000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:32.223622 systemd[1]: Started cri-containerd-b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406.scope. Oct 2 19:18:32.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.245000 audit: BPF prog-id=160 op=LOAD Oct 2 19:18:32.246000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.246000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3445 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:32.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239363534373961343639386438383236646363663134346233343132 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3445 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:32.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239363534373961343639386438383236646363663134346233343132 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.247000 audit: BPF prog-id=161 op=LOAD Oct 2 19:18:32.247000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001851e0 items=0 ppid=3445 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:32.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239363534373961343639386438383236646363663134346233343132 Oct 2 19:18:32.248000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.248000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.248000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.248000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.248000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.248000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.248000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.248000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.248000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.248000 audit: BPF prog-id=162 op=LOAD Oct 2 19:18:32.248000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000185228 items=0 ppid=3445 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:32.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239363534373961343639386438383236646363663134346233343132 Oct 2 19:18:32.248000 audit: BPF prog-id=162 op=UNLOAD Oct 2 19:18:32.249000 audit: BPF prog-id=161 op=UNLOAD Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:32.249000 audit: BPF prog-id=163 op=LOAD Oct 2 19:18:32.249000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000185638 items=0 ppid=3445 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:32.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239363534373961343639386438383236646363663134346233343132 Oct 2 19:18:32.268767 env[1050]: time="2023-10-02T19:18:32.268708737Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-mc84r,Uid:02564458-81f3-44e1-8483-a355aa1ed954,Namespace:calico-system,Attempt:1,} returns sandbox id \"b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406\"" Oct 2 19:18:32.280861 env[1050]: time="2023-10-02T19:18:32.271036683Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:18:32.330369 systemd[1]: run-containerd-runc-k8s.io-d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd-runc.KJlo5P.mount: Deactivated successfully. Oct 2 19:18:32.330530 systemd[1]: run-netns-cni\x2d4c401809\x2dcb0d\x2dced1\x2d1bf6\x2d83fdd63ac279.mount: Deactivated successfully. Oct 2 19:18:32.603768 env[1050]: time="2023-10-02T19:18:32.603699272Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:18:32.605423 env[1050]: time="2023-10-02T19:18:32.605368319Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:18:32.606329 kubelet[1941]: E1002 19:18:32.606296 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:18:32.606802 kubelet[1941]: E1002 19:18:32.606774 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:18:32.609007 kubelet[1941]: E1002 19:18:32.608963 1941 kuberuntime_manager.go:1212] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-kcdx2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-mc84r_calico-system(02564458-81f3-44e1-8483-a355aa1ed954): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:18:32.610132 env[1050]: time="2023-10-02T19:18:32.610100903Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:18:32.787136 env[1050]: time="2023-10-02T19:18:32.787083245Z" level=info msg="StopPodSandbox for \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\"" Oct 2 19:18:32.881590 env[1050]: time="2023-10-02T19:18:32.881067126Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:18:32.882950 env[1050]: time="2023-10-02T19:18:32.882617304Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:18:32.883618 kubelet[1941]: E1002 19:18:32.883587 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:18:32.883709 kubelet[1941]: E1002 19:18:32.883642 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:18:32.883779 kubelet[1941]: E1002 19:18:32.883751 1941 kuberuntime_manager.go:1212] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kcdx2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-mc84r_calico-system(02564458-81f3-44e1-8483-a355aa1ed954): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:18:32.883907 kubelet[1941]: E1002 19:18:32.883826 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-mc84r" podUID=02564458-81f3-44e1-8483-a355aa1ed954 Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.865 [INFO][3496] k8s.go 576: Cleaning up netns ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.865 [INFO][3496] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" iface="eth0" netns="/var/run/netns/cni-f6289b1d-eced-04d1-a16b-b0d19b1dcc91" Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.865 [INFO][3496] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" iface="eth0" netns="/var/run/netns/cni-f6289b1d-eced-04d1-a16b-b0d19b1dcc91" Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.866 [INFO][3496] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" iface="eth0" netns="/var/run/netns/cni-f6289b1d-eced-04d1-a16b-b0d19b1dcc91" Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.866 [INFO][3496] k8s.go 583: Releasing IP address(es) ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.866 [INFO][3496] utils.go 196: Calico CNI releasing IP address ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.898 [INFO][3502] ipam_plugin.go 416: Releasing address using handleID ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" HandleID="k8s-pod-network.29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:32.915483 env[1050]: time="2023-10-02T19:18:32Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:32.915483 env[1050]: time="2023-10-02T19:18:32Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.907 [WARNING][3502] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" HandleID="k8s-pod-network.29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.907 [INFO][3502] ipam_plugin.go 444: Releasing address using workloadID ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" HandleID="k8s-pod-network.29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:32.915483 env[1050]: time="2023-10-02T19:18:32Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:32.915483 env[1050]: 2023-10-02 19:18:32.911 [INFO][3496] k8s.go 589: Teardown processing complete. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:32.916265 env[1050]: time="2023-10-02T19:18:32.916217898Z" level=info msg="TearDown network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\" successfully" Oct 2 19:18:32.916341 env[1050]: time="2023-10-02T19:18:32.916324134Z" level=info msg="StopPodSandbox for \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\" returns successfully" Oct 2 19:18:32.918003 systemd[1]: run-netns-cni\x2df6289b1d\x2deced\x2d04d1\x2da16b\x2db0d19b1dcc91.mount: Deactivated successfully. Oct 2 19:18:32.920354 env[1050]: time="2023-10-02T19:18:32.920327710Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-57tbk,Uid:cc29fcd6-91e6-49ec-97c8-fbc782faab7e,Namespace:kube-system,Attempt:1,}" Oct 2 19:18:33.064621 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:18:33.064765 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali18192c65556: link becomes ready Oct 2 19:18:33.071118 systemd-networkd[976]: cali18192c65556: Link UP Oct 2 19:18:33.071125 systemd-networkd[976]: cali18192c65556: Gained carrier Oct 2 19:18:33.093456 kubelet[1941]: E1002 19:18:33.093430 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-mc84r" podUID=02564458-81f3-44e1-8483-a355aa1ed954 Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:32.982 [INFO][3509] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0 coredns-5d78c9869d- kube-system cc29fcd6-91e6-49ec-97c8-fbc782faab7e 744 0 2023-10-02 19:17:52 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-0-9-a7fded3d8e.novalocal coredns-5d78c9869d-57tbk eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali18192c65556 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Namespace="kube-system" Pod="coredns-5d78c9869d-57tbk" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:32.982 [INFO][3509] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Namespace="kube-system" Pod="coredns-5d78c9869d-57tbk" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.018 [INFO][3522] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" HandleID="k8s-pod-network.1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.030 [INFO][3522] ipam_plugin.go 269: Auto assigning IP ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" HandleID="k8s-pod-network.1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004d860), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-0-9-a7fded3d8e.novalocal", "pod":"coredns-5d78c9869d-57tbk", "timestamp":"2023-10-02 19:18:33.018797613 +0000 UTC"}, Hostname:"ci-3510-3-0-9-a7fded3d8e.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:18:33.099487 env[1050]: time="2023-10-02T19:18:33Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:33.099487 env[1050]: time="2023-10-02T19:18:33Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.030 [INFO][3522] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-9-a7fded3d8e.novalocal' Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.032 [INFO][3522] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.037 [INFO][3522] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.041 [INFO][3522] ipam.go 489: Trying affinity for 192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.043 [INFO][3522] ipam.go 155: Attempting to load block cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.046 [INFO][3522] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.046 [INFO][3522] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.28.128/26 handle="k8s-pod-network.1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.048 [INFO][3522] ipam.go 1682: Creating new handle: k8s-pod-network.1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.052 [INFO][3522] ipam.go 1203: Writing block in order to claim IPs block=192.168.28.128/26 handle="k8s-pod-network.1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.058 [INFO][3522] ipam.go 1216: Successfully claimed IPs: [192.168.28.131/26] block=192.168.28.128/26 handle="k8s-pod-network.1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.058 [INFO][3522] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.28.131/26] handle="k8s-pod-network.1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:33.099487 env[1050]: time="2023-10-02T19:18:33Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:33.099487 env[1050]: 2023-10-02 19:18:33.058 [INFO][3522] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.28.131/26] IPv6=[] ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" HandleID="k8s-pod-network.1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:33.100317 env[1050]: 2023-10-02 19:18:33.060 [INFO][3509] k8s.go 383: Populated endpoint ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Namespace="kube-system" Pod="coredns-5d78c9869d-57tbk" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"cc29fcd6-91e6-49ec-97c8-fbc782faab7e", ResourceVersion:"744", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"", Pod:"coredns-5d78c9869d-57tbk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali18192c65556", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:33.100317 env[1050]: 2023-10-02 19:18:33.060 [INFO][3509] k8s.go 384: Calico CNI using IPs: [192.168.28.131/32] ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Namespace="kube-system" Pod="coredns-5d78c9869d-57tbk" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:33.100317 env[1050]: 2023-10-02 19:18:33.060 [INFO][3509] dataplane_linux.go 68: Setting the host side veth name to cali18192c65556 ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Namespace="kube-system" Pod="coredns-5d78c9869d-57tbk" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:33.100317 env[1050]: 2023-10-02 19:18:33.065 [INFO][3509] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Namespace="kube-system" Pod="coredns-5d78c9869d-57tbk" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:33.100317 env[1050]: 2023-10-02 19:18:33.072 [INFO][3509] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Namespace="kube-system" Pod="coredns-5d78c9869d-57tbk" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"cc29fcd6-91e6-49ec-97c8-fbc782faab7e", ResourceVersion:"744", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da", Pod:"coredns-5d78c9869d-57tbk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali18192c65556", MAC:"2a:8e:98:c8:7c:27", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:33.100317 env[1050]: 2023-10-02 19:18:33.096 [INFO][3509] k8s.go 489: Wrote updated endpoint to datastore ContainerID="1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da" Namespace="kube-system" Pod="coredns-5d78c9869d-57tbk" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:33.122897 env[1050]: time="2023-10-02T19:18:33.122814032Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:18:33.124672 env[1050]: time="2023-10-02T19:18:33.122872580Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:18:33.124672 env[1050]: time="2023-10-02T19:18:33.122887077Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:18:33.125593 env[1050]: time="2023-10-02T19:18:33.125535701Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da pid=3546 runtime=io.containerd.runc.v2 Oct 2 19:18:33.136000 audit[3559]: NETFILTER_CFG table=filter:105 family=2 entries=34 op=nft_register_chain pid=3559 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:33.136000 audit[3559]: SYSCALL arch=c000003e syscall=46 success=yes exit=17900 a0=3 a1=7ffe8d7d2a40 a2=0 a3=7ffe8d7d2a2c items=0 ppid=3003 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.136000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:33.151752 systemd[1]: Started cri-containerd-1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da.scope. Oct 2 19:18:33.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.189000 audit: BPF prog-id=164 op=LOAD Oct 2 19:18:33.191000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.191000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3546 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161663034333037383639623433383536646136343036613931396434 Oct 2 19:18:33.191000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.191000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3546 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161663034333037383639623433383536646136343036613931396434 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.192000 audit: BPF prog-id=165 op=LOAD Oct 2 19:18:33.192000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c8160 items=0 ppid=3546 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161663034333037383639623433383536646136343036613931396434 Oct 2 19:18:33.193000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.193000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.193000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.193000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.193000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.193000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.193000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.193000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.193000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.193000 audit: BPF prog-id=166 op=LOAD Oct 2 19:18:33.193000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c81a8 items=0 ppid=3546 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161663034333037383639623433383536646136343036613931396434 Oct 2 19:18:33.193000 audit: BPF prog-id=166 op=UNLOAD Oct 2 19:18:33.194000 audit: BPF prog-id=165 op=UNLOAD Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.194000 audit: BPF prog-id=167 op=LOAD Oct 2 19:18:33.194000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c85b8 items=0 ppid=3546 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161663034333037383639623433383536646136343036613931396434 Oct 2 19:18:33.205000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:33.205000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c00eea9410 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:18:33.205000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:18:33.205000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:33.205000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c00ac62100 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:18:33.205000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:18:33.206000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:33.206000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c00f3900f0 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:18:33.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:18:33.207000 audit[3575]: NETFILTER_CFG table=filter:106 family=2 entries=11 op=nft_register_rule pid=3575 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:33.207000 audit[3575]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffca9965670 a2=0 a3=7ffca996565c items=0 ppid=2123 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.207000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:33.209000 audit[3575]: NETFILTER_CFG table=nat:107 family=2 entries=35 op=nft_register_chain pid=3575 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:33.209000 audit[3575]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffca9965670 a2=0 a3=7ffca996565c items=0 ppid=2123 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.209000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:33.220000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:33.220000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00eea9590 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:18:33.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:18:33.220000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:33.220000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00ac743a0 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:18:33.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:18:33.220000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:33.220000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00eea9620 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:18:33.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:18:33.236287 env[1050]: time="2023-10-02T19:18:33.236226148Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-57tbk,Uid:cc29fcd6-91e6-49ec-97c8-fbc782faab7e,Namespace:kube-system,Attempt:1,} returns sandbox id \"1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da\"" Oct 2 19:18:33.242190 env[1050]: time="2023-10-02T19:18:33.242152342Z" level=info msg="CreateContainer within sandbox \"1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:18:33.258497 env[1050]: time="2023-10-02T19:18:33.258452264Z" level=info msg="CreateContainer within sandbox \"1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"71636260d87cd7a24017a180b61677530b002a86f23ba70acc260f412903c421\"" Oct 2 19:18:33.261030 env[1050]: time="2023-10-02T19:18:33.260989814Z" level=info msg="StartContainer for \"71636260d87cd7a24017a180b61677530b002a86f23ba70acc260f412903c421\"" Oct 2 19:18:33.282408 systemd[1]: Started cri-containerd-71636260d87cd7a24017a180b61677530b002a86f23ba70acc260f412903c421.scope. Oct 2 19:18:33.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.301000 audit: BPF prog-id=168 op=LOAD Oct 2 19:18:33.302000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.302000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3546 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363336323630643837636437613234303137613138306236313637 Oct 2 19:18:33.302000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.302000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3546 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363336323630643837636437613234303137613138306236313637 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit: BPF prog-id=169 op=LOAD Oct 2 19:18:33.303000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000b5510 items=0 ppid=3546 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363336323630643837636437613234303137613138306236313637 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.303000 audit: BPF prog-id=170 op=LOAD Oct 2 19:18:33.303000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000b5558 items=0 ppid=3546 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363336323630643837636437613234303137613138306236313637 Oct 2 19:18:33.303000 audit: BPF prog-id=170 op=UNLOAD Oct 2 19:18:33.304000 audit: BPF prog-id=169 op=UNLOAD Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:33.304000 audit: BPF prog-id=171 op=LOAD Oct 2 19:18:33.304000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000b5968 items=0 ppid=3546 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:33.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363336323630643837636437613234303137613138306236313637 Oct 2 19:18:33.334299 env[1050]: time="2023-10-02T19:18:33.334117475Z" level=info msg="StartContainer for \"71636260d87cd7a24017a180b61677530b002a86f23ba70acc260f412903c421\" returns successfully" Oct 2 19:18:33.497843 systemd-networkd[976]: calic2615a3d40a: Gained IPv6LL Oct 2 19:18:33.787338 env[1050]: time="2023-10-02T19:18:33.787261467Z" level=info msg="StopPodSandbox for \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\"" Oct 2 19:18:33.886048 systemd-networkd[976]: cali0c622c36ed4: Gained IPv6LL Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.914 [INFO][3637] k8s.go 576: Cleaning up netns ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.915 [INFO][3637] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" iface="eth0" netns="/var/run/netns/cni-e845d0e7-980c-74c7-3ec8-ab4af020cfe8" Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.915 [INFO][3637] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" iface="eth0" netns="/var/run/netns/cni-e845d0e7-980c-74c7-3ec8-ab4af020cfe8" Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.916 [INFO][3637] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" iface="eth0" netns="/var/run/netns/cni-e845d0e7-980c-74c7-3ec8-ab4af020cfe8" Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.916 [INFO][3637] k8s.go 583: Releasing IP address(es) ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.916 [INFO][3637] utils.go 196: Calico CNI releasing IP address ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.949 [INFO][3643] ipam_plugin.go 416: Releasing address using handleID ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" HandleID="k8s-pod-network.a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:33.971305 env[1050]: time="2023-10-02T19:18:33Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:33.971305 env[1050]: time="2023-10-02T19:18:33Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.961 [WARNING][3643] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" HandleID="k8s-pod-network.a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.961 [INFO][3643] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" HandleID="k8s-pod-network.a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:33.971305 env[1050]: time="2023-10-02T19:18:33Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:33.971305 env[1050]: 2023-10-02 19:18:33.968 [INFO][3637] k8s.go 589: Teardown processing complete. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:33.975266 env[1050]: time="2023-10-02T19:18:33.975215423Z" level=info msg="TearDown network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\" successfully" Oct 2 19:18:33.975459 env[1050]: time="2023-10-02T19:18:33.975376141Z" level=info msg="StopPodSandbox for \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\" returns successfully" Oct 2 19:18:33.977931 systemd[1]: run-netns-cni\x2de845d0e7\x2d980c\x2d74c7\x2d3ec8\x2dab4af020cfe8.mount: Deactivated successfully. Oct 2 19:18:33.979893 env[1050]: time="2023-10-02T19:18:33.979805614Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bd445fdb4-l2ttl,Uid:864a145b-347f-4161-a45a-6f121db1faac,Namespace:calico-system,Attempt:1,}" Oct 2 19:18:34.104521 kubelet[1941]: E1002 19:18:34.100686 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-mc84r" podUID=02564458-81f3-44e1-8483-a355aa1ed954 Oct 2 19:18:34.115312 kubelet[1941]: I1002 19:18:34.115278 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-57tbk" podStartSLOduration=42.115218109 podCreationTimestamp="2023-10-02 19:17:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:18:34.114344931 +0000 UTC m=+57.552220844" watchObservedRunningTime="2023-10-02 19:18:34.115218109 +0000 UTC m=+57.553094012" Oct 2 19:18:34.146000 audit[3668]: NETFILTER_CFG table=filter:108 family=2 entries=8 op=nft_register_rule pid=3668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:34.146000 audit[3668]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffde207b7f0 a2=0 a3=7ffde207b7dc items=0 ppid=2123 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.146000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:34.151000 audit[3668]: NETFILTER_CFG table=nat:109 family=2 entries=44 op=nft_register_rule pid=3668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:34.151000 audit[3668]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffde207b7f0 a2=0 a3=7ffde207b7dc items=0 ppid=2123 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.151000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:34.183278 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:18:34.183418 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali57081a5d07d: link becomes ready Oct 2 19:18:34.194373 systemd-networkd[976]: cali57081a5d07d: Link UP Oct 2 19:18:34.194404 systemd-networkd[976]: cali57081a5d07d: Gained carrier Oct 2 19:18:34.214021 systemd-networkd[976]: cali18192c65556: Gained IPv6LL Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.053 [INFO][3649] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0 calico-kube-controllers-7bd445fdb4- calico-system 864a145b-347f-4161-a45a-6f121db1faac 766 0 2023-10-02 19:17:58 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7bd445fdb4 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510-3-0-9-a7fded3d8e.novalocal calico-kube-controllers-7bd445fdb4-l2ttl eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali57081a5d07d [] []}} ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-l2ttl" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.053 [INFO][3649] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-l2ttl" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.084 [INFO][3661] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" HandleID="k8s-pod-network.bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.120 [INFO][3661] ipam_plugin.go 269: Auto assigning IP ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" HandleID="k8s-pod-network.bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000435560), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-0-9-a7fded3d8e.novalocal", "pod":"calico-kube-controllers-7bd445fdb4-l2ttl", "timestamp":"2023-10-02 19:18:34.084815235 +0000 UTC"}, Hostname:"ci-3510-3-0-9-a7fded3d8e.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:18:34.225470 env[1050]: time="2023-10-02T19:18:34Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:34.225470 env[1050]: time="2023-10-02T19:18:34Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.120 [INFO][3661] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-9-a7fded3d8e.novalocal' Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.127 [INFO][3661] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.139 [INFO][3661] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.150 [INFO][3661] ipam.go 489: Trying affinity for 192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.154 [INFO][3661] ipam.go 155: Attempting to load block cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.157 [INFO][3661] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.157 [INFO][3661] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.28.128/26 handle="k8s-pod-network.bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.160 [INFO][3661] ipam.go 1682: Creating new handle: k8s-pod-network.bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.167 [INFO][3661] ipam.go 1203: Writing block in order to claim IPs block=192.168.28.128/26 handle="k8s-pod-network.bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.177 [INFO][3661] ipam.go 1216: Successfully claimed IPs: [192.168.28.132/26] block=192.168.28.128/26 handle="k8s-pod-network.bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.177 [INFO][3661] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.28.132/26] handle="k8s-pod-network.bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:34.225470 env[1050]: time="2023-10-02T19:18:34Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:34.225470 env[1050]: 2023-10-02 19:18:34.177 [INFO][3661] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.28.132/26] IPv6=[] ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" HandleID="k8s-pod-network.bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:34.226202 env[1050]: 2023-10-02 19:18:34.179 [INFO][3649] k8s.go 383: Populated endpoint ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-l2ttl" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0", GenerateName:"calico-kube-controllers-7bd445fdb4-", Namespace:"calico-system", SelfLink:"", UID:"864a145b-347f-4161-a45a-6f121db1faac", ResourceVersion:"766", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bd445fdb4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"", Pod:"calico-kube-controllers-7bd445fdb4-l2ttl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.28.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali57081a5d07d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:34.226202 env[1050]: 2023-10-02 19:18:34.179 [INFO][3649] k8s.go 384: Calico CNI using IPs: [192.168.28.132/32] ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-l2ttl" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:34.226202 env[1050]: 2023-10-02 19:18:34.180 [INFO][3649] dataplane_linux.go 68: Setting the host side veth name to cali57081a5d07d ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-l2ttl" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:34.226202 env[1050]: 2023-10-02 19:18:34.185 [INFO][3649] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-l2ttl" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:34.226202 env[1050]: 2023-10-02 19:18:34.195 [INFO][3649] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-l2ttl" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0", GenerateName:"calico-kube-controllers-7bd445fdb4-", Namespace:"calico-system", SelfLink:"", UID:"864a145b-347f-4161-a45a-6f121db1faac", ResourceVersion:"766", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bd445fdb4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f", Pod:"calico-kube-controllers-7bd445fdb4-l2ttl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.28.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali57081a5d07d", MAC:"6e:5a:e4:5e:d5:81", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:34.226202 env[1050]: 2023-10-02 19:18:34.215 [INFO][3649] k8s.go 489: Wrote updated endpoint to datastore ContainerID="bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-l2ttl" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:34.242945 env[1050]: time="2023-10-02T19:18:34.242861615Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:18:34.243120 env[1050]: time="2023-10-02T19:18:34.242918319Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:18:34.243120 env[1050]: time="2023-10-02T19:18:34.242933167Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:18:34.248256 env[1050]: time="2023-10-02T19:18:34.243268629Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f pid=3692 runtime=io.containerd.runc.v2 Oct 2 19:18:34.254000 audit[3701]: NETFILTER_CFG table=filter:110 family=2 entries=42 op=nft_register_chain pid=3701 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:34.254000 audit[3701]: SYSCALL arch=c000003e syscall=46 success=yes exit=20696 a0=3 a1=7fffbd7575f0 a2=0 a3=7fffbd7575dc items=0 ppid=3003 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.254000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:34.264509 systemd[1]: Started cri-containerd-bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f.scope. Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.285000 audit: BPF prog-id=172 op=LOAD Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3692 pid=3700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326339663136306133333037333933323366653537306562363532 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3692 pid=3700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326339663136306133333037333933323366653537306562363532 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit: BPF prog-id=173 op=LOAD Oct 2 19:18:34.286000 audit[3700]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002a16c0 items=0 ppid=3692 pid=3700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326339663136306133333037333933323366653537306562363532 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit: BPF prog-id=174 op=LOAD Oct 2 19:18:34.286000 audit[3700]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002a1708 items=0 ppid=3692 pid=3700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326339663136306133333037333933323366653537306562363532 Oct 2 19:18:34.286000 audit: BPF prog-id=174 op=UNLOAD Oct 2 19:18:34.286000 audit: BPF prog-id=173 op=UNLOAD Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { perfmon } for pid=3700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit[3700]: AVC avc: denied { bpf } for pid=3700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:34.286000 audit: BPF prog-id=175 op=LOAD Oct 2 19:18:34.286000 audit[3700]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002a1b18 items=0 ppid=3692 pid=3700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:34.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326339663136306133333037333933323366653537306562363532 Oct 2 19:18:34.334995 env[1050]: time="2023-10-02T19:18:34.334859078Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bd445fdb4-l2ttl,Uid:864a145b-347f-4161-a45a-6f121db1faac,Namespace:calico-system,Attempt:1,} returns sandbox id \"bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f\"" Oct 2 19:18:34.340100 env[1050]: time="2023-10-02T19:18:34.340062834Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:18:35.169000 audit[3734]: NETFILTER_CFG table=filter:111 family=2 entries=8 op=nft_register_rule pid=3734 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:35.169000 audit[3734]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffd00efbf50 a2=0 a3=7ffd00efbf3c items=0 ppid=2123 pid=3734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:35.169000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:35.284000 audit[3734]: NETFILTER_CFG table=nat:112 family=2 entries=56 op=nft_register_chain pid=3734 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:35.284000 audit[3734]: SYSCALL arch=c000003e syscall=46 success=yes exit=19452 a0=3 a1=7ffd00efbf50 a2=0 a3=7ffd00efbf3c items=0 ppid=2123 pid=3734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:35.284000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:35.486673 systemd-networkd[976]: cali57081a5d07d: Gained IPv6LL Oct 2 19:18:36.047226 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2672928676.mount: Deactivated successfully. Oct 2 19:18:36.791057 env[1050]: time="2023-10-02T19:18:36.790997975Z" level=info msg="StopPodSandbox for \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\"" Oct 2 19:18:36.946241 env[1050]: 2023-10-02 19:18:36.884 [WARNING][3758] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0", GenerateName:"calico-kube-controllers-7bd445fdb4-", Namespace:"calico-system", SelfLink:"", UID:"864a145b-347f-4161-a45a-6f121db1faac", ResourceVersion:"783", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bd445fdb4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f", Pod:"calico-kube-controllers-7bd445fdb4-l2ttl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.28.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali57081a5d07d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:36.946241 env[1050]: 2023-10-02 19:18:36.885 [INFO][3758] k8s.go 576: Cleaning up netns ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:36.946241 env[1050]: 2023-10-02 19:18:36.885 [INFO][3758] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" iface="eth0" netns="" Oct 2 19:18:36.946241 env[1050]: 2023-10-02 19:18:36.885 [INFO][3758] k8s.go 583: Releasing IP address(es) ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:36.946241 env[1050]: 2023-10-02 19:18:36.885 [INFO][3758] utils.go 196: Calico CNI releasing IP address ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:36.946241 env[1050]: 2023-10-02 19:18:36.924 [INFO][3764] ipam_plugin.go 416: Releasing address using handleID ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" HandleID="k8s-pod-network.a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:36.946241 env[1050]: time="2023-10-02T19:18:36Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:36.946241 env[1050]: time="2023-10-02T19:18:36Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:36.946241 env[1050]: 2023-10-02 19:18:36.940 [WARNING][3764] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" HandleID="k8s-pod-network.a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:36.946241 env[1050]: 2023-10-02 19:18:36.940 [INFO][3764] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" HandleID="k8s-pod-network.a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:36.946241 env[1050]: time="2023-10-02T19:18:36Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:36.946241 env[1050]: 2023-10-02 19:18:36.944 [INFO][3758] k8s.go 589: Teardown processing complete. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:36.946900 env[1050]: time="2023-10-02T19:18:36.946865638Z" level=info msg="TearDown network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\" successfully" Oct 2 19:18:36.946974 env[1050]: time="2023-10-02T19:18:36.946957027Z" level=info msg="StopPodSandbox for \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\" returns successfully" Oct 2 19:18:36.947679 env[1050]: time="2023-10-02T19:18:36.947655684Z" level=info msg="RemovePodSandbox for \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\"" Oct 2 19:18:36.947799 env[1050]: time="2023-10-02T19:18:36.947756652Z" level=info msg="Forcibly stopping sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\"" Oct 2 19:18:37.142643 env[1050]: 2023-10-02 19:18:37.022 [WARNING][3785] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0", GenerateName:"calico-kube-controllers-7bd445fdb4-", Namespace:"calico-system", SelfLink:"", UID:"864a145b-347f-4161-a45a-6f121db1faac", ResourceVersion:"783", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bd445fdb4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f", Pod:"calico-kube-controllers-7bd445fdb4-l2ttl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.28.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali57081a5d07d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:37.142643 env[1050]: 2023-10-02 19:18:37.023 [INFO][3785] k8s.go 576: Cleaning up netns ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:37.142643 env[1050]: 2023-10-02 19:18:37.023 [INFO][3785] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" iface="eth0" netns="" Oct 2 19:18:37.142643 env[1050]: 2023-10-02 19:18:37.023 [INFO][3785] k8s.go 583: Releasing IP address(es) ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:37.142643 env[1050]: 2023-10-02 19:18:37.023 [INFO][3785] utils.go 196: Calico CNI releasing IP address ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:37.142643 env[1050]: 2023-10-02 19:18:37.128 [INFO][3792] ipam_plugin.go 416: Releasing address using handleID ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" HandleID="k8s-pod-network.a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:37.142643 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:37.142643 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:37.142643 env[1050]: 2023-10-02 19:18:37.136 [WARNING][3792] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" HandleID="k8s-pod-network.a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:37.142643 env[1050]: 2023-10-02 19:18:37.136 [INFO][3792] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" HandleID="k8s-pod-network.a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--kube--controllers--7bd445fdb4--l2ttl-eth0" Oct 2 19:18:37.142643 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:37.142643 env[1050]: 2023-10-02 19:18:37.140 [INFO][3785] k8s.go 589: Teardown processing complete. ContainerID="a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f" Oct 2 19:18:37.143252 env[1050]: time="2023-10-02T19:18:37.143208335Z" level=info msg="TearDown network for sandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\" successfully" Oct 2 19:18:37.174345 env[1050]: time="2023-10-02T19:18:37.174269590Z" level=info msg="RemovePodSandbox \"a2361303eb40c031a079c90b1f690b2e640381f22f4c880e17df5824702fbc9f\" returns successfully" Oct 2 19:18:37.176185 env[1050]: time="2023-10-02T19:18:37.176124117Z" level=info msg="StopPodSandbox for \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\"" Oct 2 19:18:37.316210 env[1050]: 2023-10-02 19:18:37.272 [WARNING][3813] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"9dd4139f-313b-499c-a9dd-80100312b8ea", ResourceVersion:"755", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd", Pod:"coredns-5d78c9869d-2m2k6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic2615a3d40a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:37.316210 env[1050]: 2023-10-02 19:18:37.273 [INFO][3813] k8s.go 576: Cleaning up netns ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:37.316210 env[1050]: 2023-10-02 19:18:37.273 [INFO][3813] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" iface="eth0" netns="" Oct 2 19:18:37.316210 env[1050]: 2023-10-02 19:18:37.273 [INFO][3813] k8s.go 583: Releasing IP address(es) ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:37.316210 env[1050]: 2023-10-02 19:18:37.273 [INFO][3813] utils.go 196: Calico CNI releasing IP address ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:37.316210 env[1050]: 2023-10-02 19:18:37.303 [INFO][3819] ipam_plugin.go 416: Releasing address using handleID ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" HandleID="k8s-pod-network.80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:37.316210 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:37.316210 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:37.316210 env[1050]: 2023-10-02 19:18:37.311 [WARNING][3819] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" HandleID="k8s-pod-network.80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:37.316210 env[1050]: 2023-10-02 19:18:37.311 [INFO][3819] ipam_plugin.go 444: Releasing address using workloadID ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" HandleID="k8s-pod-network.80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:37.316210 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:37.316210 env[1050]: 2023-10-02 19:18:37.314 [INFO][3813] k8s.go 589: Teardown processing complete. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:37.316842 env[1050]: time="2023-10-02T19:18:37.316806495Z" level=info msg="TearDown network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\" successfully" Oct 2 19:18:37.316955 env[1050]: time="2023-10-02T19:18:37.316933722Z" level=info msg="StopPodSandbox for \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\" returns successfully" Oct 2 19:18:37.317663 env[1050]: time="2023-10-02T19:18:37.317641928Z" level=info msg="RemovePodSandbox for \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\"" Oct 2 19:18:37.317782 env[1050]: time="2023-10-02T19:18:37.317740462Z" level=info msg="Forcibly stopping sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\"" Oct 2 19:18:37.448510 env[1050]: 2023-10-02 19:18:37.386 [WARNING][3839] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"9dd4139f-313b-499c-a9dd-80100312b8ea", ResourceVersion:"755", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"d38c3ad3588dcaaf948766c77ae202d32a63dd368215adabd335a146b4f78abd", Pod:"coredns-5d78c9869d-2m2k6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic2615a3d40a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:37.448510 env[1050]: 2023-10-02 19:18:37.386 [INFO][3839] k8s.go 576: Cleaning up netns ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:37.448510 env[1050]: 2023-10-02 19:18:37.386 [INFO][3839] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" iface="eth0" netns="" Oct 2 19:18:37.448510 env[1050]: 2023-10-02 19:18:37.386 [INFO][3839] k8s.go 583: Releasing IP address(es) ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:37.448510 env[1050]: 2023-10-02 19:18:37.386 [INFO][3839] utils.go 196: Calico CNI releasing IP address ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:37.448510 env[1050]: 2023-10-02 19:18:37.433 [INFO][3846] ipam_plugin.go 416: Releasing address using handleID ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" HandleID="k8s-pod-network.80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:37.448510 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:37.448510 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:37.448510 env[1050]: 2023-10-02 19:18:37.442 [WARNING][3846] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" HandleID="k8s-pod-network.80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:37.448510 env[1050]: 2023-10-02 19:18:37.442 [INFO][3846] ipam_plugin.go 444: Releasing address using workloadID ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" HandleID="k8s-pod-network.80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--2m2k6-eth0" Oct 2 19:18:37.448510 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:37.448510 env[1050]: 2023-10-02 19:18:37.445 [INFO][3839] k8s.go 589: Teardown processing complete. ContainerID="80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6" Oct 2 19:18:37.449070 env[1050]: time="2023-10-02T19:18:37.449035912Z" level=info msg="TearDown network for sandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\" successfully" Oct 2 19:18:37.453082 env[1050]: time="2023-10-02T19:18:37.453054350Z" level=info msg="RemovePodSandbox \"80c3ef019b23e318ac4b4f84f9bbbf26de7652d20901b019821930bf5b10b1b6\" returns successfully" Oct 2 19:18:37.453708 env[1050]: time="2023-10-02T19:18:37.453687708Z" level=info msg="StopPodSandbox for \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\"" Oct 2 19:18:37.595950 env[1050]: 2023-10-02 19:18:37.527 [WARNING][3866] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"02564458-81f3-44e1-8483-a355aa1ed954", ResourceVersion:"773", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 18, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406", Pod:"csi-node-driver-mc84r", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.28.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali0c622c36ed4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:37.595950 env[1050]: 2023-10-02 19:18:37.527 [INFO][3866] k8s.go 576: Cleaning up netns ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:37.595950 env[1050]: 2023-10-02 19:18:37.527 [INFO][3866] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" iface="eth0" netns="" Oct 2 19:18:37.595950 env[1050]: 2023-10-02 19:18:37.527 [INFO][3866] k8s.go 583: Releasing IP address(es) ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:37.595950 env[1050]: 2023-10-02 19:18:37.527 [INFO][3866] utils.go 196: Calico CNI releasing IP address ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:37.595950 env[1050]: 2023-10-02 19:18:37.581 [INFO][3872] ipam_plugin.go 416: Releasing address using handleID ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" HandleID="k8s-pod-network.3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:37.595950 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:37.595950 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:37.595950 env[1050]: 2023-10-02 19:18:37.590 [WARNING][3872] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" HandleID="k8s-pod-network.3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:37.595950 env[1050]: 2023-10-02 19:18:37.590 [INFO][3872] ipam_plugin.go 444: Releasing address using workloadID ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" HandleID="k8s-pod-network.3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:37.595950 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:37.595950 env[1050]: 2023-10-02 19:18:37.593 [INFO][3866] k8s.go 589: Teardown processing complete. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:37.596627 env[1050]: time="2023-10-02T19:18:37.596594291Z" level=info msg="TearDown network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\" successfully" Oct 2 19:18:37.596707 env[1050]: time="2023-10-02T19:18:37.596685580Z" level=info msg="StopPodSandbox for \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\" returns successfully" Oct 2 19:18:37.597308 env[1050]: time="2023-10-02T19:18:37.597286397Z" level=info msg="RemovePodSandbox for \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\"" Oct 2 19:18:37.597508 env[1050]: time="2023-10-02T19:18:37.597467524Z" level=info msg="Forcibly stopping sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\"" Oct 2 19:18:37.749249 env[1050]: 2023-10-02 19:18:37.673 [WARNING][3893] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"02564458-81f3-44e1-8483-a355aa1ed954", ResourceVersion:"773", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 18, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"b965479a4698d8826dccf144b3412e5e837a3b1a277a84adcf4cb6caee29d406", Pod:"csi-node-driver-mc84r", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.28.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali0c622c36ed4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:37.749249 env[1050]: 2023-10-02 19:18:37.673 [INFO][3893] k8s.go 576: Cleaning up netns ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:37.749249 env[1050]: 2023-10-02 19:18:37.673 [INFO][3893] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" iface="eth0" netns="" Oct 2 19:18:37.749249 env[1050]: 2023-10-02 19:18:37.673 [INFO][3893] k8s.go 583: Releasing IP address(es) ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:37.749249 env[1050]: 2023-10-02 19:18:37.673 [INFO][3893] utils.go 196: Calico CNI releasing IP address ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:37.749249 env[1050]: 2023-10-02 19:18:37.729 [INFO][3899] ipam_plugin.go 416: Releasing address using handleID ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" HandleID="k8s-pod-network.3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:37.749249 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:37.749249 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:37.749249 env[1050]: 2023-10-02 19:18:37.743 [WARNING][3899] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" HandleID="k8s-pod-network.3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:37.749249 env[1050]: 2023-10-02 19:18:37.743 [INFO][3899] ipam_plugin.go 444: Releasing address using workloadID ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" HandleID="k8s-pod-network.3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-csi--node--driver--mc84r-eth0" Oct 2 19:18:37.749249 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:37.749249 env[1050]: 2023-10-02 19:18:37.746 [INFO][3893] k8s.go 589: Teardown processing complete. ContainerID="3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12" Oct 2 19:18:37.750001 env[1050]: time="2023-10-02T19:18:37.749961728Z" level=info msg="TearDown network for sandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\" successfully" Oct 2 19:18:37.754399 env[1050]: time="2023-10-02T19:18:37.754349704Z" level=info msg="RemovePodSandbox \"3a5a4d5f4b88872674b284863dd5f37f8063e8b7e169167f71c80f1469a71d12\" returns successfully" Oct 2 19:18:37.755104 env[1050]: time="2023-10-02T19:18:37.755079831Z" level=info msg="StopPodSandbox for \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\"" Oct 2 19:18:37.888159 env[1050]: 2023-10-02 19:18:37.824 [WARNING][3920] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"cc29fcd6-91e6-49ec-97c8-fbc782faab7e", ResourceVersion:"775", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da", Pod:"coredns-5d78c9869d-57tbk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali18192c65556", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:37.888159 env[1050]: 2023-10-02 19:18:37.824 [INFO][3920] k8s.go 576: Cleaning up netns ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:37.888159 env[1050]: 2023-10-02 19:18:37.825 [INFO][3920] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" iface="eth0" netns="" Oct 2 19:18:37.888159 env[1050]: 2023-10-02 19:18:37.825 [INFO][3920] k8s.go 583: Releasing IP address(es) ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:37.888159 env[1050]: 2023-10-02 19:18:37.825 [INFO][3920] utils.go 196: Calico CNI releasing IP address ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:37.888159 env[1050]: 2023-10-02 19:18:37.873 [INFO][3926] ipam_plugin.go 416: Releasing address using handleID ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" HandleID="k8s-pod-network.29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:37.888159 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:37.888159 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:37.888159 env[1050]: 2023-10-02 19:18:37.882 [WARNING][3926] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" HandleID="k8s-pod-network.29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:37.888159 env[1050]: 2023-10-02 19:18:37.882 [INFO][3926] ipam_plugin.go 444: Releasing address using workloadID ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" HandleID="k8s-pod-network.29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:37.888159 env[1050]: time="2023-10-02T19:18:37Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:37.888159 env[1050]: 2023-10-02 19:18:37.886 [INFO][3920] k8s.go 589: Teardown processing complete. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:37.889106 env[1050]: time="2023-10-02T19:18:37.888189303Z" level=info msg="TearDown network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\" successfully" Oct 2 19:18:37.889106 env[1050]: time="2023-10-02T19:18:37.888226072Z" level=info msg="StopPodSandbox for \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\" returns successfully" Oct 2 19:18:37.889106 env[1050]: time="2023-10-02T19:18:37.888703379Z" level=info msg="RemovePodSandbox for \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\"" Oct 2 19:18:37.889106 env[1050]: time="2023-10-02T19:18:37.888735228Z" level=info msg="Forcibly stopping sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\"" Oct 2 19:18:38.026880 env[1050]: 2023-10-02 19:18:37.982 [WARNING][3945] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"cc29fcd6-91e6-49ec-97c8-fbc782faab7e", ResourceVersion:"775", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 17, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"1af04307869b43856da6406a919d4a3f75a1b60aaeb4bfc5919b1043cd2085da", Pod:"coredns-5d78c9869d-57tbk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali18192c65556", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:38.026880 env[1050]: 2023-10-02 19:18:37.982 [INFO][3945] k8s.go 576: Cleaning up netns ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:38.026880 env[1050]: 2023-10-02 19:18:37.982 [INFO][3945] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" iface="eth0" netns="" Oct 2 19:18:38.026880 env[1050]: 2023-10-02 19:18:37.982 [INFO][3945] k8s.go 583: Releasing IP address(es) ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:38.026880 env[1050]: 2023-10-02 19:18:37.982 [INFO][3945] utils.go 196: Calico CNI releasing IP address ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:38.026880 env[1050]: 2023-10-02 19:18:38.014 [INFO][3951] ipam_plugin.go 416: Releasing address using handleID ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" HandleID="k8s-pod-network.29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:38.026880 env[1050]: time="2023-10-02T19:18:38Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:38.026880 env[1050]: time="2023-10-02T19:18:38Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:38.026880 env[1050]: 2023-10-02 19:18:38.021 [WARNING][3951] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" HandleID="k8s-pod-network.29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:38.026880 env[1050]: 2023-10-02 19:18:38.021 [INFO][3951] ipam_plugin.go 444: Releasing address using workloadID ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" HandleID="k8s-pod-network.29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-coredns--5d78c9869d--57tbk-eth0" Oct 2 19:18:38.026880 env[1050]: time="2023-10-02T19:18:38Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:38.026880 env[1050]: 2023-10-02 19:18:38.025 [INFO][3945] k8s.go 589: Teardown processing complete. ContainerID="29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb" Oct 2 19:18:38.027561 env[1050]: time="2023-10-02T19:18:38.027527295Z" level=info msg="TearDown network for sandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\" successfully" Oct 2 19:18:38.032437 env[1050]: time="2023-10-02T19:18:38.032379842Z" level=info msg="RemovePodSandbox \"29adca152a3724034f26242c563dfb2823cbf0e358580b5d24d7383e9dd763bb\" returns successfully" Oct 2 19:18:38.567459 env[1050]: time="2023-10-02T19:18:38.567340172Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:38.573768 env[1050]: time="2023-10-02T19:18:38.573688632Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:38.579155 env[1050]: time="2023-10-02T19:18:38.579098707Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:38.583788 env[1050]: time="2023-10-02T19:18:38.583727458Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:b764feb1777655aabce5988324b69b412d23e087436ee2414dff893a158fcdef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:18:38.585841 env[1050]: time="2023-10-02T19:18:38.585782682Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" returns image reference \"sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78\"" Oct 2 19:18:38.593511 env[1050]: time="2023-10-02T19:18:38.593375758Z" level=info msg="CreateContainer within sandbox \"bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Oct 2 19:18:38.629696 kernel: kauditd_printk_skb: 392 callbacks suppressed Oct 2 19:18:38.629894 kernel: audit: type=1400 audit(1696274318.612:1275): avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.629951 kernel: audit: type=1300 audit(1696274318.612:1275): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020f72c0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:38.612000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.612000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020f72c0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:38.622370 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2765024472.mount: Deactivated successfully. Oct 2 19:18:38.638668 env[1050]: time="2023-10-02T19:18:38.638603932Z" level=info msg="CreateContainer within sandbox \"bd2c9f160a330739323fe570eb652cd6fc691202e4e359976969b9345756fa7f\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"3261949f778a5b9c69895f9d6e2742071a6004230efdbf2d1f17ebff75497732\"" Oct 2 19:18:38.612000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.650798 kernel: audit: type=1327 audit(1696274318.612:1275): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.651216 env[1050]: time="2023-10-02T19:18:38.651140926Z" level=info msg="StartContainer for \"3261949f778a5b9c69895f9d6e2742071a6004230efdbf2d1f17ebff75497732\"" Oct 2 19:18:38.622000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.622000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020f72e0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:38.667215 kernel: audit: type=1400 audit(1696274318.622:1276): avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.667358 kernel: audit: type=1300 audit(1696274318.622:1276): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020f72e0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:38.622000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.627000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.677716 kernel: audit: type=1327 audit(1696274318.622:1276): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.677835 kernel: audit: type=1400 audit(1696274318.627:1277): avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.677884 kernel: audit: type=1300 audit(1696274318.627:1277): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020f7400 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:38.627000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020f7400 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:38.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.692648 kernel: audit: type=1327 audit(1696274318.627:1277): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.692782 kernel: audit: type=1400 audit(1696274318.635:1278): avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.635000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.635000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002604200 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:18:38.635000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.715025 systemd[1]: Started cri-containerd-3261949f778a5b9c69895f9d6e2742071a6004230efdbf2d1f17ebff75497732.scope. Oct 2 19:18:38.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.729000 audit: BPF prog-id=176 op=LOAD Oct 2 19:18:38.730000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.730000 audit[3967]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3692 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363139343966373738613562396336393839356639643665323734 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3692 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363139343966373738613562396336393839356639643665323734 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.731000 audit: BPF prog-id=177 op=LOAD Oct 2 19:18:38.731000 audit[3967]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025730 items=0 ppid=3692 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363139343966373738613562396336393839356639643665323734 Oct 2 19:18:38.732000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.732000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.732000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.732000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.732000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.732000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.732000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.732000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.732000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.732000 audit: BPF prog-id=178 op=LOAD Oct 2 19:18:38.732000 audit[3967]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025778 items=0 ppid=3692 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363139343966373738613562396336393839356639643665323734 Oct 2 19:18:38.733000 audit: BPF prog-id=178 op=UNLOAD Oct 2 19:18:38.733000 audit: BPF prog-id=177 op=UNLOAD Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { perfmon } for pid=3967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit[3967]: AVC avc: denied { bpf } for pid=3967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.734000 audit: BPF prog-id=179 op=LOAD Oct 2 19:18:38.734000 audit[3967]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025b88 items=0 ppid=3692 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363139343966373738613562396336393839356639643665323734 Oct 2 19:18:38.758430 env[1050]: time="2023-10-02T19:18:38.758345270Z" level=info msg="StartContainer for \"3261949f778a5b9c69895f9d6e2742071a6004230efdbf2d1f17ebff75497732\" returns successfully" Oct 2 19:18:39.144267 kubelet[1941]: I1002 19:18:39.144218 1941 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7bd445fdb4-l2ttl" podStartSLOduration=36.894898934 podCreationTimestamp="2023-10-02 19:17:58 +0000 UTC" firstStartedPulling="2023-10-02 19:18:34.337207711 +0000 UTC m=+57.775083614" lastFinishedPulling="2023-10-02 19:18:38.586470081 +0000 UTC m=+62.024346014" observedRunningTime="2023-10-02 19:18:39.143896161 +0000 UTC m=+62.581772074" watchObservedRunningTime="2023-10-02 19:18:39.144161334 +0000 UTC m=+62.582037237" Oct 2 19:18:43.024800 kubelet[1941]: I1002 19:18:43.024750 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:18:43.032074 systemd[1]: Created slice kubepods-besteffort-podb908418b_02be_461d_84ed_33d255620247.slice. Oct 2 19:18:43.050113 kubelet[1941]: I1002 19:18:43.050060 1941 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:18:43.055966 systemd[1]: Created slice kubepods-besteffort-pod81b7d72a_3449_48e6_9ac9_9fb4744db9b1.slice. Oct 2 19:18:43.099000 audit[4048]: NETFILTER_CFG table=filter:113 family=2 entries=9 op=nft_register_rule pid=4048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:43.099000 audit[4048]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffce0c6d430 a2=0 a3=7ffce0c6d41c items=0 ppid=2123 pid=4048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:43.099000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:43.100000 audit[4048]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:43.100000 audit[4048]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffce0c6d430 a2=0 a3=7ffce0c6d41c items=0 ppid=2123 pid=4048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:43.100000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:43.114000 audit[4050]: NETFILTER_CFG table=filter:115 family=2 entries=10 op=nft_register_rule pid=4050 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:43.114000 audit[4050]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffca9e0da40 a2=0 a3=7ffca9e0da2c items=0 ppid=2123 pid=4050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:43.114000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:43.115000 audit[4050]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=4050 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:43.115000 audit[4050]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffca9e0da40 a2=0 a3=7ffca9e0da2c items=0 ppid=2123 pid=4050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:43.115000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:43.150008 kubelet[1941]: I1002 19:18:43.149948 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/81b7d72a-3449-48e6-9ac9-9fb4744db9b1-calico-apiserver-certs\") pod \"calico-apiserver-8486bdd546-kpq4n\" (UID: \"81b7d72a-3449-48e6-9ac9-9fb4744db9b1\") " pod="calico-apiserver/calico-apiserver-8486bdd546-kpq4n" Oct 2 19:18:43.150253 kubelet[1941]: I1002 19:18:43.150084 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-92lzs\" (UniqueName: \"kubernetes.io/projected/81b7d72a-3449-48e6-9ac9-9fb4744db9b1-kube-api-access-92lzs\") pod \"calico-apiserver-8486bdd546-kpq4n\" (UID: \"81b7d72a-3449-48e6-9ac9-9fb4744db9b1\") " pod="calico-apiserver/calico-apiserver-8486bdd546-kpq4n" Oct 2 19:18:43.150253 kubelet[1941]: I1002 19:18:43.150164 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/b908418b-02be-461d-84ed-33d255620247-calico-apiserver-certs\") pod \"calico-apiserver-8486bdd546-c4prq\" (UID: \"b908418b-02be-461d-84ed-33d255620247\") " pod="calico-apiserver/calico-apiserver-8486bdd546-c4prq" Oct 2 19:18:43.150253 kubelet[1941]: I1002 19:18:43.150198 1941 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kf7m8\" (UniqueName: \"kubernetes.io/projected/b908418b-02be-461d-84ed-33d255620247-kube-api-access-kf7m8\") pod \"calico-apiserver-8486bdd546-c4prq\" (UID: \"b908418b-02be-461d-84ed-33d255620247\") " pod="calico-apiserver/calico-apiserver-8486bdd546-c4prq" Oct 2 19:18:43.253587 kubelet[1941]: E1002 19:18:43.253529 1941 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Oct 2 19:18:43.253587 kubelet[1941]: E1002 19:18:43.253593 1941 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Oct 2 19:18:43.255650 kubelet[1941]: E1002 19:18:43.255607 1941 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/b908418b-02be-461d-84ed-33d255620247-calico-apiserver-certs podName:b908418b-02be-461d-84ed-33d255620247 nodeName:}" failed. No retries permitted until 2023-10-02 19:18:43.754008604 +0000 UTC m=+67.191884508 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/b908418b-02be-461d-84ed-33d255620247-calico-apiserver-certs") pod "calico-apiserver-8486bdd546-c4prq" (UID: "b908418b-02be-461d-84ed-33d255620247") : secret "calico-apiserver-certs" not found Oct 2 19:18:43.255650 kubelet[1941]: E1002 19:18:43.255659 1941 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/81b7d72a-3449-48e6-9ac9-9fb4744db9b1-calico-apiserver-certs podName:81b7d72a-3449-48e6-9ac9-9fb4744db9b1 nodeName:}" failed. No retries permitted until 2023-10-02 19:18:43.75564411 +0000 UTC m=+67.193520023 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/81b7d72a-3449-48e6-9ac9-9fb4744db9b1-calico-apiserver-certs") pod "calico-apiserver-8486bdd546-kpq4n" (UID: "81b7d72a-3449-48e6-9ac9-9fb4744db9b1") : secret "calico-apiserver-certs" not found Oct 2 19:18:43.937208 env[1050]: time="2023-10-02T19:18:43.937155114Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8486bdd546-c4prq,Uid:b908418b-02be-461d-84ed-33d255620247,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:18:43.960594 env[1050]: time="2023-10-02T19:18:43.960524285Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8486bdd546-kpq4n,Uid:81b7d72a-3449-48e6-9ac9-9fb4744db9b1,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:18:44.340849 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib0dbfa521aa: link becomes ready Oct 2 19:18:44.340415 systemd-networkd[976]: calib0dbfa521aa: Link UP Oct 2 19:18:44.340624 systemd-networkd[976]: calib0dbfa521aa: Gained carrier Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.167 [INFO][4059] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0 calico-apiserver-8486bdd546- calico-apiserver b908418b-02be-461d-84ed-33d255620247 859 0 2023-10-02 19:18:43 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:8486bdd546 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-0-9-a7fded3d8e.novalocal calico-apiserver-8486bdd546-c4prq eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib0dbfa521aa [] []}} ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-c4prq" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.167 [INFO][4059] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-c4prq" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.235 [INFO][4081] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" HandleID="k8s-pod-network.d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.262 [INFO][4081] ipam_plugin.go 269: Auto assigning IP ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" HandleID="k8s-pod-network.d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0007150f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-0-9-a7fded3d8e.novalocal", "pod":"calico-apiserver-8486bdd546-c4prq", "timestamp":"2023-10-02 19:18:44.235136513 +0000 UTC"}, Hostname:"ci-3510-3-0-9-a7fded3d8e.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:18:44.360837 env[1050]: time="2023-10-02T19:18:44Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:44.360837 env[1050]: time="2023-10-02T19:18:44Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.263 [INFO][4081] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-9-a7fded3d8e.novalocal' Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.274 [INFO][4081] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.290 [INFO][4081] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.296 [INFO][4081] ipam.go 489: Trying affinity for 192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.299 [INFO][4081] ipam.go 155: Attempting to load block cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.311 [INFO][4081] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.312 [INFO][4081] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.28.128/26 handle="k8s-pod-network.d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.314 [INFO][4081] ipam.go 1682: Creating new handle: k8s-pod-network.d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489 Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.319 [INFO][4081] ipam.go 1203: Writing block in order to claim IPs block=192.168.28.128/26 handle="k8s-pod-network.d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.324 [INFO][4081] ipam.go 1216: Successfully claimed IPs: [192.168.28.133/26] block=192.168.28.128/26 handle="k8s-pod-network.d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.324 [INFO][4081] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.28.133/26] handle="k8s-pod-network.d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.360837 env[1050]: time="2023-10-02T19:18:44Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:44.360837 env[1050]: 2023-10-02 19:18:44.325 [INFO][4081] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.28.133/26] IPv6=[] ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" HandleID="k8s-pod-network.d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" Oct 2 19:18:44.361786 env[1050]: 2023-10-02 19:18:44.327 [INFO][4059] k8s.go 383: Populated endpoint ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-c4prq" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0", GenerateName:"calico-apiserver-8486bdd546-", Namespace:"calico-apiserver", SelfLink:"", UID:"b908418b-02be-461d-84ed-33d255620247", ResourceVersion:"859", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 18, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8486bdd546", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"", Pod:"calico-apiserver-8486bdd546-c4prq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib0dbfa521aa", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:44.361786 env[1050]: 2023-10-02 19:18:44.327 [INFO][4059] k8s.go 384: Calico CNI using IPs: [192.168.28.133/32] ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-c4prq" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" Oct 2 19:18:44.361786 env[1050]: 2023-10-02 19:18:44.327 [INFO][4059] dataplane_linux.go 68: Setting the host side veth name to calib0dbfa521aa ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-c4prq" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" Oct 2 19:18:44.361786 env[1050]: 2023-10-02 19:18:44.329 [INFO][4059] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-c4prq" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" Oct 2 19:18:44.361786 env[1050]: 2023-10-02 19:18:44.339 [INFO][4059] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-c4prq" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0", GenerateName:"calico-apiserver-8486bdd546-", Namespace:"calico-apiserver", SelfLink:"", UID:"b908418b-02be-461d-84ed-33d255620247", ResourceVersion:"859", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 18, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8486bdd546", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489", Pod:"calico-apiserver-8486bdd546-c4prq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib0dbfa521aa", MAC:"d6:2b:ee:4a:58:43", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:44.361786 env[1050]: 2023-10-02 19:18:44.358 [INFO][4059] k8s.go 489: Wrote updated endpoint to datastore ContainerID="d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-c4prq" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--c4prq-eth0" Oct 2 19:18:44.386759 env[1050]: time="2023-10-02T19:18:44.386649530Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:18:44.386947 env[1050]: time="2023-10-02T19:18:44.386772479Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:18:44.386947 env[1050]: time="2023-10-02T19:18:44.386807615Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:18:44.387198 env[1050]: time="2023-10-02T19:18:44.387111994Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489 pid=4115 runtime=io.containerd.runc.v2 Oct 2 19:18:44.402444 systemd[1]: Started sshd@7-172.24.4.56:22-172.24.4.1:40548.service. Oct 2 19:18:44.408907 kernel: kauditd_printk_skb: 71 callbacks suppressed Oct 2 19:18:44.409038 kernel: audit: type=1130 audit(1696274324.401:1301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.56:22-172.24.4.1:40548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:44.401000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.56:22-172.24.4.1:40548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:44.427609 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie67a6d7119c: link becomes ready Oct 2 19:18:44.444567 systemd-networkd[976]: calie67a6d7119c: Link UP Oct 2 19:18:44.444575 systemd-networkd[976]: calie67a6d7119c: Gained carrier Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.198 [INFO][4066] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0 calico-apiserver-8486bdd546- calico-apiserver 81b7d72a-3449-48e6-9ac9-9fb4744db9b1 864 0 2023-10-02 19:18:43 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:8486bdd546 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-0-9-a7fded3d8e.novalocal calico-apiserver-8486bdd546-kpq4n eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie67a6d7119c [] []}} ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-kpq4n" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.199 [INFO][4066] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-kpq4n" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.265 [INFO][4088] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" HandleID="k8s-pod-network.8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.289 [INFO][4088] ipam_plugin.go 269: Auto assigning IP ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" HandleID="k8s-pod-network.8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003a7640), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-0-9-a7fded3d8e.novalocal", "pod":"calico-apiserver-8486bdd546-kpq4n", "timestamp":"2023-10-02 19:18:44.265930332 +0000 UTC"}, Hostname:"ci-3510-3-0-9-a7fded3d8e.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:18:44.480457 env[1050]: time="2023-10-02T19:18:44Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:18:44.480457 env[1050]: time="2023-10-02T19:18:44Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.324 [INFO][4088] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-9-a7fded3d8e.novalocal' Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.332 [INFO][4088] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.346 [INFO][4088] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.356 [INFO][4088] ipam.go 489: Trying affinity for 192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.365 [INFO][4088] ipam.go 155: Attempting to load block cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.369 [INFO][4088] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.28.128/26 host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.369 [INFO][4088] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.28.128/26 handle="k8s-pod-network.8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.372 [INFO][4088] ipam.go 1682: Creating new handle: k8s-pod-network.8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06 Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.378 [INFO][4088] ipam.go 1203: Writing block in order to claim IPs block=192.168.28.128/26 handle="k8s-pod-network.8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.395 [INFO][4088] ipam.go 1216: Successfully claimed IPs: [192.168.28.134/26] block=192.168.28.128/26 handle="k8s-pod-network.8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.395 [INFO][4088] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.28.134/26] handle="k8s-pod-network.8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" host="ci-3510-3-0-9-a7fded3d8e.novalocal" Oct 2 19:18:44.480457 env[1050]: time="2023-10-02T19:18:44Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:18:44.480457 env[1050]: 2023-10-02 19:18:44.395 [INFO][4088] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.28.134/26] IPv6=[] ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" HandleID="k8s-pod-network.8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Workload="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" Oct 2 19:18:44.481167 env[1050]: 2023-10-02 19:18:44.416 [INFO][4066] k8s.go 383: Populated endpoint ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-kpq4n" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0", GenerateName:"calico-apiserver-8486bdd546-", Namespace:"calico-apiserver", SelfLink:"", UID:"81b7d72a-3449-48e6-9ac9-9fb4744db9b1", ResourceVersion:"864", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 18, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8486bdd546", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"", Pod:"calico-apiserver-8486bdd546-kpq4n", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie67a6d7119c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:44.481167 env[1050]: 2023-10-02 19:18:44.417 [INFO][4066] k8s.go 384: Calico CNI using IPs: [192.168.28.134/32] ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-kpq4n" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" Oct 2 19:18:44.481167 env[1050]: 2023-10-02 19:18:44.417 [INFO][4066] dataplane_linux.go 68: Setting the host side veth name to calie67a6d7119c ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-kpq4n" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" Oct 2 19:18:44.481167 env[1050]: 2023-10-02 19:18:44.434 [INFO][4066] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-kpq4n" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" Oct 2 19:18:44.481167 env[1050]: 2023-10-02 19:18:44.444 [INFO][4066] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-kpq4n" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0", GenerateName:"calico-apiserver-8486bdd546-", Namespace:"calico-apiserver", SelfLink:"", UID:"81b7d72a-3449-48e6-9ac9-9fb4744db9b1", ResourceVersion:"864", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 18, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"8486bdd546", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-9-a7fded3d8e.novalocal", ContainerID:"8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06", Pod:"calico-apiserver-8486bdd546-kpq4n", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie67a6d7119c", MAC:"96:77:55:ff:ec:e2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:18:44.481167 env[1050]: 2023-10-02 19:18:44.473 [INFO][4066] k8s.go 489: Wrote updated endpoint to datastore ContainerID="8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06" Namespace="calico-apiserver" Pod="calico-apiserver-8486bdd546-kpq4n" WorkloadEndpoint="ci--3510--3--0--9--a7fded3d8e.novalocal-k8s-calico--apiserver--8486bdd546--kpq4n-eth0" Oct 2 19:18:44.496481 systemd[1]: Started cri-containerd-d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489.scope. Oct 2 19:18:44.499063 systemd[1]: run-containerd-runc-k8s.io-d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489-runc.xEVyrZ.mount: Deactivated successfully. Oct 2 19:18:44.498000 audit[4145]: NETFILTER_CFG table=filter:117 family=2 entries=59 op=nft_register_chain pid=4145 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:44.503415 kernel: audit: type=1325 audit(1696274324.498:1302): table=filter:117 family=2 entries=59 op=nft_register_chain pid=4145 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:44.498000 audit[4145]: SYSCALL arch=c000003e syscall=46 success=yes exit=29292 a0=3 a1=7ffc03bb6910 a2=0 a3=7ffc03bb68fc items=0 ppid=3003 pid=4145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.509479 kernel: audit: type=1300 audit(1696274324.498:1302): arch=c000003e syscall=46 success=yes exit=29292 a0=3 a1=7ffc03bb6910 a2=0 a3=7ffc03bb68fc items=0 ppid=3003 pid=4145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.498000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:44.514462 kernel: audit: type=1327 audit(1696274324.498:1302): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:44.524777 env[1050]: time="2023-10-02T19:18:44.524686868Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:18:44.524777 env[1050]: time="2023-10-02T19:18:44.524734456Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:18:44.525065 env[1050]: time="2023-10-02T19:18:44.524750997Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:18:44.525277 env[1050]: time="2023-10-02T19:18:44.525226797Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06 pid=4169 runtime=io.containerd.runc.v2 Oct 2 19:18:44.562937 kernel: audit: type=1400 audit(1696274324.554:1303): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.563040 kernel: audit: type=1400 audit(1696274324.554:1304): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.566892 kernel: audit: type=1400 audit(1696274324.554:1305): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.570625 kernel: audit: type=1400 audit(1696274324.554:1306): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.574517 kernel: audit: type=1400 audit(1696274324.554:1307): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.578301 kernel: audit: type=1400 audit(1696274324.554:1308): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.554000 audit: BPF prog-id=180 op=LOAD Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4115 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431383566636639376632363965373235636439383437356331663532 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4115 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431383566636639376632363965373235636439383437356331663532 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.555000 audit: BPF prog-id=181 op=LOAD Oct 2 19:18:44.555000 audit[4132]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003de6f0 items=0 ppid=4115 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431383566636639376632363965373235636439383437356331663532 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit: BPF prog-id=182 op=LOAD Oct 2 19:18:44.565000 audit[4132]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003de738 items=0 ppid=4115 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431383566636639376632363965373235636439383437356331663532 Oct 2 19:18:44.565000 audit: BPF prog-id=182 op=UNLOAD Oct 2 19:18:44.565000 audit: BPF prog-id=181 op=UNLOAD Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.576000 audit[4188]: NETFILTER_CFG table=filter:118 family=2 entries=50 op=nft_register_chain pid=4188 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:18:44.565000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.565000 audit: BPF prog-id=183 op=LOAD Oct 2 19:18:44.565000 audit[4132]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003deb48 items=0 ppid=4115 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431383566636639376632363965373235636439383437356331663532 Oct 2 19:18:44.576000 audit[4188]: SYSCALL arch=c000003e syscall=46 success=yes exit=24496 a0=3 a1=7ffe598cbb50 a2=0 a3=7ffe598cbb3c items=0 ppid=3003 pid=4188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.576000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:18:44.592795 systemd[1]: Started cri-containerd-8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06.scope. Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.619000 audit: BPF prog-id=184 op=LOAD Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833383562376531353538363737393539653462313463646661393461 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833383562376531353538363737393539653462313463646661393461 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit: BPF prog-id=185 op=LOAD Oct 2 19:18:44.620000 audit[4179]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000096340 items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833383562376531353538363737393539653462313463646661393461 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.620000 audit: BPF prog-id=186 op=LOAD Oct 2 19:18:44.620000 audit[4179]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000096388 items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833383562376531353538363737393539653462313463646661393461 Oct 2 19:18:44.620000 audit: BPF prog-id=186 op=UNLOAD Oct 2 19:18:44.621000 audit: BPF prog-id=185 op=UNLOAD Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:44.621000 audit: BPF prog-id=187 op=LOAD Oct 2 19:18:44.621000 audit[4179]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000096798 items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:44.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833383562376531353538363737393539653462313463646661393461 Oct 2 19:18:44.665880 env[1050]: time="2023-10-02T19:18:44.665810966Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8486bdd546-c4prq,Uid:b908418b-02be-461d-84ed-33d255620247,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"d185fcf97f269e725cd98475c1f52f578897fca382ede134ccd016025546c489\"" Oct 2 19:18:44.670284 env[1050]: time="2023-10-02T19:18:44.668991040Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:18:44.688797 env[1050]: time="2023-10-02T19:18:44.688727632Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-8486bdd546-kpq4n,Uid:81b7d72a-3449-48e6-9ac9-9fb4744db9b1,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"8385b7e1558677959e4b14cdfa94ac0a6a7aa88900642c7fb8ac47197c41fa06\"" Oct 2 19:18:44.925857 env[1050]: time="2023-10-02T19:18:44.922569847Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:18:44.928087 env[1050]: time="2023-10-02T19:18:44.927993105Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:18:44.928835 kubelet[1941]: E1002 19:18:44.928765 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:18:44.929592 kubelet[1941]: E1002 19:18:44.928869 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:18:44.929592 kubelet[1941]: E1002 19:18:44.929452 1941 kuberuntime_manager.go:1212] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kf7m8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-apiserver-8486bdd546-c4prq_calico-apiserver(b908418b-02be-461d-84ed-33d255620247): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:18:44.929592 kubelet[1941]: E1002 19:18:44.929551 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-8486bdd546-c4prq" podUID=b908418b-02be-461d-84ed-33d255620247 Oct 2 19:18:44.934010 env[1050]: time="2023-10-02T19:18:44.933580359Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:18:45.172476 kubelet[1941]: E1002 19:18:45.166528 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-8486bdd546-c4prq" podUID=b908418b-02be-461d-84ed-33d255620247 Oct 2 19:18:45.190993 env[1050]: time="2023-10-02T19:18:45.190666810Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:18:45.195465 env[1050]: time="2023-10-02T19:18:45.195265752Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:18:45.196262 kubelet[1941]: E1002 19:18:45.196136 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:18:45.196482 kubelet[1941]: E1002 19:18:45.196313 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:18:45.198054 env[1050]: time="2023-10-02T19:18:45.197253340Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:18:45.199930 kubelet[1941]: E1002 19:18:45.199858 1941 kuberuntime_manager.go:1212] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-92lzs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-apiserver-8486bdd546-kpq4n_calico-apiserver(81b7d72a-3449-48e6-9ac9-9fb4744db9b1): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:18:45.200225 kubelet[1941]: E1002 19:18:45.200055 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-8486bdd546-kpq4n" podUID=81b7d72a-3449-48e6-9ac9-9fb4744db9b1 Oct 2 19:18:45.238000 audit[4213]: NETFILTER_CFG table=filter:119 family=2 entries=10 op=nft_register_rule pid=4213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:45.238000 audit[4213]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffee4d049b0 a2=0 a3=7ffee4d0499c items=0 ppid=2123 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:45.238000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:45.239000 audit[4213]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=4213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:45.239000 audit[4213]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffee4d049b0 a2=0 a3=7ffee4d0499c items=0 ppid=2123 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:45.239000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:45.455106 env[1050]: time="2023-10-02T19:18:45.454805380Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:18:45.457627 env[1050]: time="2023-10-02T19:18:45.457514077Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:18:45.458464 kubelet[1941]: E1002 19:18:45.458311 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:18:45.458777 kubelet[1941]: E1002 19:18:45.458752 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:18:45.459453 kubelet[1941]: E1002 19:18:45.459372 1941 kuberuntime_manager.go:1212] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-kcdx2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-mc84r_calico-system(02564458-81f3-44e1-8483-a355aa1ed954): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:18:45.462895 env[1050]: time="2023-10-02T19:18:45.462824811Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:18:45.517000 audit[4129]: USER_ACCT pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:45.519291 sshd[4129]: Accepted publickey for core from 172.24.4.1 port 40548 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:18:45.520000 audit[4129]: CRED_ACQ pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:45.520000 audit[4129]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7375a6d0 a2=3 a3=0 items=0 ppid=1 pid=4129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:45.520000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:45.524757 sshd[4129]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:45.535474 systemd-logind[1044]: New session 8 of user core. Oct 2 19:18:45.538577 systemd[1]: Started session-8.scope. Oct 2 19:18:45.549000 audit[4129]: USER_START pid=4129 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:45.553000 audit[4214]: CRED_ACQ pid=4214 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:45.739794 env[1050]: time="2023-10-02T19:18:45.737980188Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:18:45.741325 env[1050]: time="2023-10-02T19:18:45.741177388Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:18:45.742359 kubelet[1941]: E1002 19:18:45.742280 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:18:45.742556 kubelet[1941]: E1002 19:18:45.742439 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:18:45.742725 kubelet[1941]: E1002 19:18:45.742687 1941 kuberuntime_manager.go:1212] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kcdx2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-mc84r_calico-system(02564458-81f3-44e1-8483-a355aa1ed954): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:18:45.743038 kubelet[1941]: E1002 19:18:45.742836 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-mc84r" podUID=02564458-81f3-44e1-8483-a355aa1ed954 Oct 2 19:18:45.850133 systemd-networkd[976]: calib0dbfa521aa: Gained IPv6LL Oct 2 19:18:46.165064 kubelet[1941]: E1002 19:18:46.165008 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-8486bdd546-kpq4n" podUID=81b7d72a-3449-48e6-9ac9-9fb4744db9b1 Oct 2 19:18:46.165753 kubelet[1941]: E1002 19:18:46.165715 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-8486bdd546-c4prq" podUID=b908418b-02be-461d-84ed-33d255620247 Oct 2 19:18:46.214000 audit[4225]: NETFILTER_CFG table=filter:121 family=2 entries=10 op=nft_register_rule pid=4225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:46.214000 audit[4225]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffff132ef50 a2=0 a3=7ffff132ef3c items=0 ppid=2123 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:46.214000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:46.215000 audit[4225]: NETFILTER_CFG table=nat:122 family=2 entries=20 op=nft_register_rule pid=4225 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:18:46.215000 audit[4225]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffff132ef50 a2=0 a3=7ffff132ef3c items=0 ppid=2123 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:46.215000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:18:46.335819 sshd[4129]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:46.336000 audit[4129]: USER_END pid=4129 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:46.337000 audit[4129]: CRED_DISP pid=4129 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:46.341299 systemd[1]: sshd@7-172.24.4.56:22-172.24.4.1:40548.service: Deactivated successfully. Oct 2 19:18:46.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.56:22-172.24.4.1:40548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:46.343206 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:18:46.344680 systemd-logind[1044]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:18:46.348000 systemd-logind[1044]: Removed session 8. Oct 2 19:18:46.362806 systemd-networkd[976]: calie67a6d7119c: Gained IPv6LL Oct 2 19:18:56.350044 systemd[1]: Started sshd@8-172.24.4.56:22-172.24.4.1:38626.service. Oct 2 19:18:56.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.56:22-172.24.4.1:38626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:56.354217 kernel: kauditd_printk_skb: 133 callbacks suppressed Oct 2 19:18:56.354365 kernel: audit: type=1130 audit(1696274336.349:1352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.56:22-172.24.4.1:38626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:57.496946 systemd[1]: run-containerd-runc-k8s.io-3261949f778a5b9c69895f9d6e2742071a6004230efdbf2d1f17ebff75497732-runc.v6qIai.mount: Deactivated successfully. Oct 2 19:18:58.004000 audit[4277]: USER_ACCT pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:58.008221 sshd[4277]: Accepted publickey for core from 172.24.4.1 port 38626 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:18:58.016430 kernel: audit: type=1101 audit(1696274338.004:1353): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:58.015000 audit[4277]: CRED_ACQ pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:58.026622 kernel: audit: type=1103 audit(1696274338.015:1354): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:58.026777 kernel: audit: type=1006 audit(1696274338.015:1355): pid=4277 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:18:58.015000 audit[4277]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc18691c60 a2=3 a3=0 items=0 ppid=1 pid=4277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:58.044171 kernel: audit: type=1300 audit(1696274338.015:1355): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc18691c60 a2=3 a3=0 items=0 ppid=1 pid=4277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:58.015000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:58.049476 kernel: audit: type=1327 audit(1696274338.015:1355): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:58.066088 sshd[4277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:58.081237 systemd-logind[1044]: New session 9 of user core. Oct 2 19:18:58.082113 systemd[1]: Started session-9.scope. Oct 2 19:18:58.094000 audit[4277]: USER_START pid=4277 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:58.107000 audit[4325]: CRED_ACQ pid=4325 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:58.119144 kernel: audit: type=1105 audit(1696274338.094:1356): pid=4277 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:58.127015 kernel: audit: type=1103 audit(1696274338.107:1357): pid=4325 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:59.137001 sshd[4277]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:59.139000 audit[4277]: USER_END pid=4277 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:59.150000 systemd[1]: Started sshd@9-172.24.4.56:22-172.24.4.1:38636.service. Oct 2 19:18:59.155604 kernel: audit: type=1106 audit(1696274339.139:1358): pid=4277 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:59.139000 audit[4277]: CRED_DISP pid=4277 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:59.159991 systemd[1]: sshd@8-172.24.4.56:22-172.24.4.1:38626.service: Deactivated successfully. Oct 2 19:18:59.161704 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:18:59.162454 kernel: audit: type=1104 audit(1696274339.139:1359): pid=4277 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:18:59.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.56:22-172.24.4.1:38636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:59.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.56:22-172.24.4.1:38626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:59.163858 systemd-logind[1044]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:18:59.166443 systemd-logind[1044]: Removed session 9. Oct 2 19:18:59.192328 systemd[1]: run-containerd-runc-k8s.io-6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea-runc.TKcik4.mount: Deactivated successfully. Oct 2 19:18:59.788670 env[1050]: time="2023-10-02T19:18:59.788554040Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:19:00.059808 env[1050]: time="2023-10-02T19:19:00.059543982Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:19:00.061631 env[1050]: time="2023-10-02T19:19:00.061566627Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:19:00.063326 kubelet[1941]: E1002 19:19:00.062147 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:19:00.063326 kubelet[1941]: E1002 19:19:00.062241 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:19:00.063326 kubelet[1941]: E1002 19:19:00.062542 1941 kuberuntime_manager.go:1212] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kf7m8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-apiserver-8486bdd546-c4prq_calico-apiserver(b908418b-02be-461d-84ed-33d255620247): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:19:00.063326 kubelet[1941]: E1002 19:19:00.062643 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-8486bdd546-c4prq" podUID=b908418b-02be-461d-84ed-33d255620247 Oct 2 19:19:00.528250 sshd[4341]: Accepted publickey for core from 172.24.4.1 port 38636 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:19:00.526000 audit[4341]: USER_ACCT pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:00.532000 audit[4341]: CRED_ACQ pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:00.533000 audit[4341]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd84efb80 a2=3 a3=0 items=0 ppid=1 pid=4341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:00.533000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:00.536364 sshd[4341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:19:00.547520 systemd-logind[1044]: New session 10 of user core. Oct 2 19:19:00.547981 systemd[1]: Started session-10.scope. Oct 2 19:19:00.562000 audit[4341]: USER_START pid=4341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:00.565000 audit[4365]: CRED_ACQ pid=4365 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:00.789522 kubelet[1941]: E1002 19:19:00.789245 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-mc84r" podUID=02564458-81f3-44e1-8483-a355aa1ed954 Oct 2 19:19:00.789816 env[1050]: time="2023-10-02T19:19:00.789685959Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:19:01.054798 env[1050]: time="2023-10-02T19:19:01.054464613Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:19:01.056595 env[1050]: time="2023-10-02T19:19:01.056466691Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:19:01.056899 kubelet[1941]: E1002 19:19:01.056877 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:19:01.057028 kubelet[1941]: E1002 19:19:01.057017 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:19:01.057226 kubelet[1941]: E1002 19:19:01.057209 1941 kuberuntime_manager.go:1212] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-92lzs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-apiserver-8486bdd546-kpq4n_calico-apiserver(81b7d72a-3449-48e6-9ac9-9fb4744db9b1): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:19:01.057479 kubelet[1941]: E1002 19:19:01.057465 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-8486bdd546-kpq4n" podUID=81b7d72a-3449-48e6-9ac9-9fb4744db9b1 Oct 2 19:19:02.707962 systemd[1]: Started sshd@10-172.24.4.56:22-172.24.4.1:38648.service. Oct 2 19:19:02.708953 sshd[4341]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:02.722464 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 19:19:02.722666 kernel: audit: type=1130 audit(1696274342.708:1367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.56:22-172.24.4.1:38648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:02.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.56:22-172.24.4.1:38648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:02.726000 audit[4341]: USER_END pid=4341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:02.744914 kernel: audit: type=1106 audit(1696274342.726:1368): pid=4341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:02.727000 audit[4341]: CRED_DISP pid=4341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:02.757438 kernel: audit: type=1104 audit(1696274342.727:1369): pid=4341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:02.757652 systemd[1]: sshd@9-172.24.4.56:22-172.24.4.1:38636.service: Deactivated successfully. Oct 2 19:19:02.759262 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:19:02.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.56:22-172.24.4.1:38636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:02.762112 systemd-logind[1044]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:19:02.771434 kernel: audit: type=1131 audit(1696274342.756:1370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.56:22-172.24.4.1:38636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:02.772749 systemd-logind[1044]: Removed session 10. Oct 2 19:19:04.171000 audit[4376]: USER_ACCT pid=4376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:04.173545 sshd[4376]: Accepted publickey for core from 172.24.4.1 port 38648 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:19:04.182000 audit[4376]: CRED_ACQ pid=4376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:04.186239 sshd[4376]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:19:04.194353 kernel: audit: type=1101 audit(1696274344.171:1371): pid=4376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:04.194623 kernel: audit: type=1103 audit(1696274344.182:1372): pid=4376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:04.182000 audit[4376]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff424ce850 a2=3 a3=0 items=0 ppid=1 pid=4376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:04.213949 kernel: audit: type=1006 audit(1696274344.182:1373): pid=4376 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:19:04.214087 kernel: audit: type=1300 audit(1696274344.182:1373): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff424ce850 a2=3 a3=0 items=0 ppid=1 pid=4376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:04.182000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:04.219524 kernel: audit: type=1327 audit(1696274344.182:1373): proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:04.227892 systemd-logind[1044]: New session 11 of user core. Oct 2 19:19:04.228670 systemd[1]: Started session-11.scope. Oct 2 19:19:04.247000 audit[4376]: USER_START pid=4376 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:04.263446 kernel: audit: type=1105 audit(1696274344.247:1374): pid=4376 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:04.264000 audit[4379]: CRED_ACQ pid=4379 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:04.975031 sshd[4376]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:04.975000 audit[4376]: USER_END pid=4376 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:04.976000 audit[4376]: CRED_DISP pid=4376 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:04.980238 systemd[1]: sshd@10-172.24.4.56:22-172.24.4.1:38648.service: Deactivated successfully. Oct 2 19:19:04.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.56:22-172.24.4.1:38648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:04.981877 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:19:04.983355 systemd-logind[1044]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:19:04.985611 systemd-logind[1044]: Removed session 11. Oct 2 19:19:09.208179 systemd[1]: run-containerd-runc-k8s.io-6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea-runc.KVSF5x.mount: Deactivated successfully. Oct 2 19:19:11.789341 kubelet[1941]: E1002 19:19:11.789289 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-8486bdd546-kpq4n" podUID=81b7d72a-3449-48e6-9ac9-9fb4744db9b1 Oct 2 19:19:12.790209 kubelet[1941]: E1002 19:19:12.790169 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-8486bdd546-c4prq" podUID=b908418b-02be-461d-84ed-33d255620247 Oct 2 19:19:13.789684 env[1050]: time="2023-10-02T19:19:13.789429559Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:19:14.053545 env[1050]: time="2023-10-02T19:19:14.053198127Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:19:14.056353 env[1050]: time="2023-10-02T19:19:14.056202962Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:19:14.056982 kubelet[1941]: E1002 19:19:14.056924 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:19:14.057571 kubelet[1941]: E1002 19:19:14.057025 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:19:14.057917 kubelet[1941]: E1002 19:19:14.057874 1941 kuberuntime_manager.go:1212] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-kcdx2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-mc84r_calico-system(02564458-81f3-44e1-8483-a355aa1ed954): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:19:14.060608 env[1050]: time="2023-10-02T19:19:14.060356361Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:19:14.315630 env[1050]: time="2023-10-02T19:19:14.315323653Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:19:14.329191 env[1050]: time="2023-10-02T19:19:14.329015508Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:19:14.329780 kubelet[1941]: E1002 19:19:14.329731 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:19:14.330067 kubelet[1941]: E1002 19:19:14.330042 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:19:14.330461 kubelet[1941]: E1002 19:19:14.330426 1941 kuberuntime_manager.go:1212] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kcdx2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-mc84r_calico-system(02564458-81f3-44e1-8483-a355aa1ed954): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:19:14.330926 kubelet[1941]: E1002 19:19:14.330889 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-mc84r" podUID=02564458-81f3-44e1-8483-a355aa1ed954 Oct 2 19:19:14.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.56:22-172.24.4.1:59038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:14.998811 systemd[1]: Started sshd@11-172.24.4.56:22-172.24.4.1:59038.service. Oct 2 19:19:15.001524 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 19:19:15.001611 kernel: audit: type=1130 audit(1696274354.997:1379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.56:22-172.24.4.1:59038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:16.296000 audit[4456]: USER_ACCT pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:16.298378 sshd[4456]: Accepted publickey for core from 172.24.4.1 port 59038 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:19:16.311476 kernel: audit: type=1101 audit(1696274356.296:1380): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:16.309000 audit[4456]: CRED_ACQ pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:16.328649 kernel: audit: type=1103 audit(1696274356.309:1381): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:16.328756 kernel: audit: type=1006 audit(1696274356.309:1382): pid=4456 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:19:16.312260 sshd[4456]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:19:16.309000 audit[4456]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdb3dfbc0 a2=3 a3=0 items=0 ppid=1 pid=4456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:16.341506 kernel: audit: type=1300 audit(1696274356.309:1382): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdb3dfbc0 a2=3 a3=0 items=0 ppid=1 pid=4456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:16.309000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:16.346577 kernel: audit: type=1327 audit(1696274356.309:1382): proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:16.355073 systemd-logind[1044]: New session 12 of user core. Oct 2 19:19:16.358470 systemd[1]: Started session-12.scope. Oct 2 19:19:16.372000 audit[4456]: USER_START pid=4456 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:16.392000 audit[4458]: CRED_ACQ pid=4458 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:16.398623 kernel: audit: type=1105 audit(1696274356.372:1383): pid=4456 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:16.398732 kernel: audit: type=1103 audit(1696274356.392:1384): pid=4458 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:17.116655 sshd[4456]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:17.117000 audit[4456]: USER_END pid=4456 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:17.118000 audit[4456]: CRED_DISP pid=4456 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:17.142295 kernel: audit: type=1106 audit(1696274357.117:1385): pid=4456 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:17.142511 kernel: audit: type=1104 audit(1696274357.118:1386): pid=4456 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:17.143858 systemd[1]: sshd@11-172.24.4.56:22-172.24.4.1:59038.service: Deactivated successfully. Oct 2 19:19:17.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.56:22-172.24.4.1:59038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.145702 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:19:17.148281 systemd-logind[1044]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:19:17.152803 systemd-logind[1044]: Removed session 12. Oct 2 19:19:17.445288 systemd[1]: run-containerd-runc-k8s.io-3261949f778a5b9c69895f9d6e2742071a6004230efdbf2d1f17ebff75497732-runc.1Qounu.mount: Deactivated successfully. Oct 2 19:19:17.511651 systemd[1]: run-containerd-runc-k8s.io-3261949f778a5b9c69895f9d6e2742071a6004230efdbf2d1f17ebff75497732-runc.k7iMf6.mount: Deactivated successfully. Oct 2 19:19:19.201341 systemd[1]: run-containerd-runc-k8s.io-6b0685799dd2761f209e48b4f2f667d94d233dbdf88c28c7bb3da6af62bf9eea-runc.GiC7H1.mount: Deactivated successfully. Oct 2 19:19:24.791512 kubelet[1941]: E1002 19:19:24.791468 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-mc84r" podUID=02564458-81f3-44e1-8483-a355aa1ed954 Oct 2 19:19:24.792217 env[1050]: time="2023-10-02T19:19:24.791769023Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:19:25.049827 env[1050]: time="2023-10-02T19:19:25.049554925Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:19:25.051764 env[1050]: time="2023-10-02T19:19:25.051620299Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:19:25.052474 kubelet[1941]: E1002 19:19:25.052415 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:19:25.052636 kubelet[1941]: E1002 19:19:25.052568 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:19:25.053377 kubelet[1941]: E1002 19:19:25.053306 1941 kuberuntime_manager.go:1212] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-92lzs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-apiserver-8486bdd546-kpq4n_calico-apiserver(81b7d72a-3449-48e6-9ac9-9fb4744db9b1): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:19:25.053860 kubelet[1941]: E1002 19:19:25.053823 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-8486bdd546-kpq4n" podUID=81b7d72a-3449-48e6-9ac9-9fb4744db9b1 Oct 2 19:19:26.791683 env[1050]: time="2023-10-02T19:19:26.790473100Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:19:27.050483 env[1050]: time="2023-10-02T19:19:27.049832978Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:19:27.051903 env[1050]: time="2023-10-02T19:19:27.051779216Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:19:27.052303 kubelet[1941]: E1002 19:19:27.052253 1941 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:19:27.052981 kubelet[1941]: E1002 19:19:27.052352 1941 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:19:27.052981 kubelet[1941]: E1002 19:19:27.052621 1941 kuberuntime_manager.go:1212] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kf7m8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-apiserver-8486bdd546-c4prq_calico-apiserver(b908418b-02be-461d-84ed-33d255620247): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:19:27.052981 kubelet[1941]: E1002 19:19:27.052717 1941 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-8486bdd546-c4prq" podUID=b908418b-02be-461d-84ed-33d255620247 Oct 2 19:19:27.128582 systemd[1]: Started sshd@12-172.24.4.56:22-172.24.4.1:41828.service. Oct 2 19:19:27.134890 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:19:27.135101 kernel: audit: type=1130 audit(1696274367.128:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.56:22-172.24.4.1:41828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:27.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.56:22-172.24.4.1:41828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:27.469558 systemd[1]: run-containerd-runc-k8s.io-3261949f778a5b9c69895f9d6e2742071a6004230efdbf2d1f17ebff75497732-runc.LkG235.mount: Deactivated successfully. Oct 2 19:19:28.427000 audit[4534]: USER_ACCT pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:28.428199 sshd[4534]: Accepted publickey for core from 172.24.4.1 port 41828 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:19:28.439499 kernel: audit: type=1101 audit(1696274368.427:1389): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:28.441000 audit[4534]: CRED_ACQ pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:28.442646 sshd[4534]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:19:28.459308 kernel: audit: type=1103 audit(1696274368.441:1390): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:28.459483 kernel: audit: type=1006 audit(1696274368.441:1391): pid=4534 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:19:28.441000 audit[4534]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeaa827970 a2=3 a3=0 items=0 ppid=1 pid=4534 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:28.472463 kernel: audit: type=1300 audit(1696274368.441:1391): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeaa827970 a2=3 a3=0 items=0 ppid=1 pid=4534 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:28.441000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:28.478718 kernel: audit: type=1327 audit(1696274368.441:1391): proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:28.485118 systemd-logind[1044]: New session 13 of user core. Oct 2 19:19:28.486735 systemd[1]: Started session-13.scope. Oct 2 19:19:28.501000 audit[4534]: USER_START pid=4534 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:28.502000 audit[4577]: CRED_ACQ pid=4577 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:28.524326 kernel: audit: type=1105 audit(1696274368.501:1392): pid=4534 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:28.524544 kernel: audit: type=1103 audit(1696274368.502:1393): pid=4577 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:29.246778 sshd[4534]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:29.249000 audit[4534]: USER_END pid=4534 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:29.252158 systemd[1]: sshd@12-172.24.4.56:22-172.24.4.1:41828.service: Deactivated successfully. Oct 2 19:19:29.257846 kernel: audit: type=1106 audit(1696274369.249:1394): pid=4534 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:29.258052 kernel: audit: type=1104 audit(1696274369.249:1395): pid=4534 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:29.249000 audit[4534]: CRED_DISP pid=4534 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:19:29.256727 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:19:29.261518 systemd-logind[1044]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:19:29.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.56:22-172.24.4.1:41828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:29.263276 systemd-logind[1044]: Removed session 13. Oct 2 19:19:31.372000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:31.372000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023677c0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:19:31.372000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:31.373000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:31.373000 audit[1822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001d93da0 a2=fc6 a3=0 items=0 ppid=1652 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c919 key=(null) Oct 2 19:19:31.373000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:33.213000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.216467 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:19:33.216615 kernel: audit: type=1400 audit(1696274373.213:1400): avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.213000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.239468 kernel: audit: type=1400 audit(1696274373.213:1399): avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.213000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c009b2e4b0 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:19:33.256429 kernel: audit: type=1300 audit(1696274373.213:1399): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c009b2e4b0 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:19:33.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:19:33.263421 kernel: audit: type=1327 audit(1696274373.213:1399): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:19:33.221000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.221000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c009b2e600 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:19:33.273531 kernel: audit: type=1400 audit(1696274373.221:1401): avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.273708 kernel: audit: type=1300 audit(1696274373.221:1401): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c009b2e600 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:19:33.273741 kernel: audit: type=1327 audit(1696274373.221:1401): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:19:33.221000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:19:33.221000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.282306 kernel: audit: type=1400 audit(1696274373.221:1402): avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.282496 kernel: audit: type=1300 audit(1696274373.221:1402): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c008c19a00 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:19:33.221000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c008c19a00 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:19:33.221000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:19:33.292889 kernel: audit: type=1327 audit(1696274373.221:1402): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:19:33.221000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.221000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c009b2e7b0 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:19:33.221000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:19:33.213000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c009ecfce0 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:19:33.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:19:33.227000 audit[1811]: AVC avc: denied { watch } for pid=1811 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525356 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:33.227000 audit[1811]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c008aec040 a2=fc6 a3=0 items=0 ppid=1667 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c163 key=(null) Oct 2 19:19:33.227000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265