Oct 2 19:12:04.868355 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:12:04.868384 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:12:04.868398 kernel: BIOS-provided physical RAM map: Oct 2 19:12:04.868408 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:12:04.868418 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:12:04.868427 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:12:04.868439 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdcfff] usable Oct 2 19:12:04.868449 kernel: BIOS-e820: [mem 0x000000009cfdd000-0x000000009cffffff] reserved Oct 2 19:12:04.868461 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:12:04.868471 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:12:04.868481 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Oct 2 19:12:04.868490 kernel: NX (Execute Disable) protection: active Oct 2 19:12:04.868499 kernel: SMBIOS 2.8 present. Oct 2 19:12:04.868507 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Oct 2 19:12:04.868518 kernel: Hypervisor detected: KVM Oct 2 19:12:04.868527 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:12:04.868535 kernel: kvm-clock: cpu 0, msr 93f8a001, primary cpu clock Oct 2 19:12:04.868544 kernel: kvm-clock: using sched offset of 2921111416 cycles Oct 2 19:12:04.868553 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:12:04.868562 kernel: tsc: Detected 2794.748 MHz processor Oct 2 19:12:04.868571 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:12:04.868580 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:12:04.868589 kernel: last_pfn = 0x9cfdd max_arch_pfn = 0x400000000 Oct 2 19:12:04.868600 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:12:04.868608 kernel: Using GB pages for direct mapping Oct 2 19:12:04.868617 kernel: ACPI: Early table checksum verification disabled Oct 2 19:12:04.868626 kernel: ACPI: RSDP 0x00000000000F59C0 000014 (v00 BOCHS ) Oct 2 19:12:04.868635 kernel: ACPI: RSDT 0x000000009CFE1BDD 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:12:04.868643 kernel: ACPI: FACP 0x000000009CFE1A79 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:12:04.868652 kernel: ACPI: DSDT 0x000000009CFE0040 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:12:04.868661 kernel: ACPI: FACS 0x000000009CFE0000 000040 Oct 2 19:12:04.868670 kernel: ACPI: APIC 0x000000009CFE1AED 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:12:04.868680 kernel: ACPI: HPET 0x000000009CFE1B7D 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:12:04.868689 kernel: ACPI: WAET 0x000000009CFE1BB5 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:12:04.868697 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe1a79-0x9cfe1aec] Oct 2 19:12:04.868706 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe1a78] Oct 2 19:12:04.868715 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Oct 2 19:12:04.868723 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe1aed-0x9cfe1b7c] Oct 2 19:12:04.868732 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe1b7d-0x9cfe1bb4] Oct 2 19:12:04.868741 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe1bb5-0x9cfe1bdc] Oct 2 19:12:04.868755 kernel: No NUMA configuration found Oct 2 19:12:04.868764 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdcfff] Oct 2 19:12:04.868773 kernel: NODE_DATA(0) allocated [mem 0x9cfd7000-0x9cfdcfff] Oct 2 19:12:04.868783 kernel: Zone ranges: Oct 2 19:12:04.868792 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:12:04.868802 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdcfff] Oct 2 19:12:04.868812 kernel: Normal empty Oct 2 19:12:04.868822 kernel: Movable zone start for each node Oct 2 19:12:04.868831 kernel: Early memory node ranges Oct 2 19:12:04.868840 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:12:04.868849 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdcfff] Oct 2 19:12:04.868859 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdcfff] Oct 2 19:12:04.868868 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:12:04.868877 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:12:04.868894 kernel: On node 0, zone DMA32: 12323 pages in unavailable ranges Oct 2 19:12:04.868905 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:12:04.868915 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:12:04.868924 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:12:04.868933 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:12:04.868943 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:12:04.868952 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:12:04.868961 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:12:04.868971 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:12:04.868980 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:12:04.868991 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:12:04.869000 kernel: TSC deadline timer available Oct 2 19:12:04.869010 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 2 19:12:04.869019 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 2 19:12:04.869028 kernel: kvm-guest: setup PV sched yield Oct 2 19:12:04.869037 kernel: [mem 0x9d000000-0xfeffbfff] available for PCI devices Oct 2 19:12:04.869047 kernel: Booting paravirtualized kernel on KVM Oct 2 19:12:04.869057 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:12:04.869066 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 2 19:12:04.869077 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Oct 2 19:12:04.869087 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Oct 2 19:12:04.869096 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 2 19:12:04.869105 kernel: kvm-guest: setup async PF for cpu 0 Oct 2 19:12:04.869114 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Oct 2 19:12:04.869123 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:12:04.869133 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:12:04.869142 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632733 Oct 2 19:12:04.869151 kernel: Policy zone: DMA32 Oct 2 19:12:04.869164 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:12:04.869174 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:12:04.869183 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:12:04.869193 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:12:04.869205 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:12:04.869231 kernel: Memory: 2438768K/2571756K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 132728K reserved, 0K cma-reserved) Oct 2 19:12:04.869243 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:12:04.869254 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:12:04.869269 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:12:04.869280 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:12:04.869293 kernel: rcu: RCU event tracing is enabled. Oct 2 19:12:04.869305 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:12:04.869316 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:12:04.869328 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:12:04.869338 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:12:04.869348 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:12:04.869357 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 2 19:12:04.869368 kernel: random: crng init done Oct 2 19:12:04.869377 kernel: Console: colour VGA+ 80x25 Oct 2 19:12:04.869386 kernel: printk: console [ttyS0] enabled Oct 2 19:12:04.869395 kernel: ACPI: Core revision 20210730 Oct 2 19:12:04.869405 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 2 19:12:04.869414 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:12:04.869423 kernel: x2apic enabled Oct 2 19:12:04.869432 kernel: Switched APIC routing to physical x2apic. Oct 2 19:12:04.869441 kernel: kvm-guest: setup PV IPIs Oct 2 19:12:04.869451 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:12:04.869462 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:12:04.869471 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 2 19:12:04.869480 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 2 19:12:04.869490 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 2 19:12:04.869499 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 2 19:12:04.869509 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:12:04.869518 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:12:04.869528 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:12:04.869539 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:12:04.869554 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 2 19:12:04.869564 kernel: RETBleed: Mitigation: untrained return thunk Oct 2 19:12:04.869575 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:12:04.869585 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:12:04.869595 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:12:04.869605 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:12:04.869615 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:12:04.869625 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:12:04.869635 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 2 19:12:04.869646 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:12:04.869656 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:12:04.869665 kernel: LSM: Security Framework initializing Oct 2 19:12:04.869675 kernel: SELinux: Initializing. Oct 2 19:12:04.869685 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:12:04.869695 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:12:04.869704 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 2 19:12:04.869716 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 2 19:12:04.869725 kernel: ... version: 0 Oct 2 19:12:04.869735 kernel: ... bit width: 48 Oct 2 19:12:04.869745 kernel: ... generic registers: 6 Oct 2 19:12:04.869754 kernel: ... value mask: 0000ffffffffffff Oct 2 19:12:04.869764 kernel: ... max period: 00007fffffffffff Oct 2 19:12:04.869774 kernel: ... fixed-purpose events: 0 Oct 2 19:12:04.869801 kernel: ... event mask: 000000000000003f Oct 2 19:12:04.869811 kernel: signal: max sigframe size: 1776 Oct 2 19:12:04.869823 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:12:04.869833 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:12:04.869842 kernel: x86: Booting SMP configuration: Oct 2 19:12:04.869852 kernel: .... node #0, CPUs: #1 Oct 2 19:12:04.869862 kernel: kvm-clock: cpu 1, msr 93f8a041, secondary cpu clock Oct 2 19:12:04.869872 kernel: kvm-guest: setup async PF for cpu 1 Oct 2 19:12:04.869887 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Oct 2 19:12:04.869897 kernel: #2 Oct 2 19:12:04.869907 kernel: kvm-clock: cpu 2, msr 93f8a081, secondary cpu clock Oct 2 19:12:04.869919 kernel: kvm-guest: setup async PF for cpu 2 Oct 2 19:12:04.869928 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Oct 2 19:12:04.869938 kernel: #3 Oct 2 19:12:04.869962 kernel: kvm-clock: cpu 3, msr 93f8a0c1, secondary cpu clock Oct 2 19:12:04.869971 kernel: kvm-guest: setup async PF for cpu 3 Oct 2 19:12:04.869981 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Oct 2 19:12:04.869990 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:12:04.870000 kernel: smpboot: Max logical packages: 1 Oct 2 19:12:04.870020 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 2 19:12:04.870034 kernel: devtmpfs: initialized Oct 2 19:12:04.870046 kernel: x86/mm: Memory block size: 128MB Oct 2 19:12:04.870056 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:12:04.870066 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:12:04.870089 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:12:04.870100 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:12:04.870110 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:12:04.870120 kernel: audit: type=2000 audit(1696273924.367:1): state=initialized audit_enabled=0 res=1 Oct 2 19:12:04.870130 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:12:04.870152 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:12:04.870165 kernel: cpuidle: using governor menu Oct 2 19:12:04.870175 kernel: ACPI: bus type PCI registered Oct 2 19:12:04.870184 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:12:04.870194 kernel: dca service started, version 1.12.1 Oct 2 19:12:04.870229 kernel: PCI: Using configuration type 1 for base access Oct 2 19:12:04.870239 kernel: PCI: Using configuration type 1 for extended access Oct 2 19:12:04.870249 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:12:04.870274 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:12:04.870292 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:12:04.870311 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:12:04.870323 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:12:04.870353 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:12:04.870365 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:12:04.870378 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:12:04.870390 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:12:04.870403 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:12:04.870415 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:12:04.870427 kernel: ACPI: Interpreter enabled Oct 2 19:12:04.870443 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:12:04.870455 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:12:04.870467 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:12:04.870495 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:12:04.870506 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:12:04.870707 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:12:04.870725 kernel: acpiphp: Slot [3] registered Oct 2 19:12:04.870735 kernel: acpiphp: Slot [4] registered Oct 2 19:12:04.870748 kernel: acpiphp: Slot [5] registered Oct 2 19:12:04.870758 kernel: acpiphp: Slot [6] registered Oct 2 19:12:04.870768 kernel: acpiphp: Slot [7] registered Oct 2 19:12:04.870778 kernel: acpiphp: Slot [8] registered Oct 2 19:12:04.870797 kernel: acpiphp: Slot [9] registered Oct 2 19:12:04.870811 kernel: acpiphp: Slot [10] registered Oct 2 19:12:04.870821 kernel: acpiphp: Slot [11] registered Oct 2 19:12:04.870831 kernel: acpiphp: Slot [12] registered Oct 2 19:12:04.870841 kernel: acpiphp: Slot [13] registered Oct 2 19:12:04.870853 kernel: acpiphp: Slot [14] registered Oct 2 19:12:04.870863 kernel: acpiphp: Slot [15] registered Oct 2 19:12:04.870881 kernel: acpiphp: Slot [16] registered Oct 2 19:12:04.870900 kernel: acpiphp: Slot [17] registered Oct 2 19:12:04.870910 kernel: acpiphp: Slot [18] registered Oct 2 19:12:04.870920 kernel: acpiphp: Slot [19] registered Oct 2 19:12:04.870930 kernel: acpiphp: Slot [20] registered Oct 2 19:12:04.870939 kernel: acpiphp: Slot [21] registered Oct 2 19:12:04.870949 kernel: acpiphp: Slot [22] registered Oct 2 19:12:04.870972 kernel: acpiphp: Slot [23] registered Oct 2 19:12:04.870985 kernel: acpiphp: Slot [24] registered Oct 2 19:12:04.870995 kernel: acpiphp: Slot [25] registered Oct 2 19:12:04.871005 kernel: acpiphp: Slot [26] registered Oct 2 19:12:04.871014 kernel: acpiphp: Slot [27] registered Oct 2 19:12:04.871024 kernel: acpiphp: Slot [28] registered Oct 2 19:12:04.871047 kernel: acpiphp: Slot [29] registered Oct 2 19:12:04.871056 kernel: acpiphp: Slot [30] registered Oct 2 19:12:04.871066 kernel: acpiphp: Slot [31] registered Oct 2 19:12:04.871085 kernel: PCI host bridge to bus 0000:00 Oct 2 19:12:04.871283 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:12:04.871440 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:12:04.871555 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:12:04.871671 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Oct 2 19:12:04.871814 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:12:04.871947 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:12:04.872080 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:12:04.872201 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:12:04.872365 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:12:04.872484 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Oct 2 19:12:04.872580 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:12:04.872675 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:12:04.872769 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:12:04.872867 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:12:04.872983 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:12:04.873083 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:12:04.873177 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:12:04.873418 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Oct 2 19:12:04.873514 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Oct 2 19:12:04.873606 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Oct 2 19:12:04.873701 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Oct 2 19:12:04.873790 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:12:04.873900 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:12:04.873996 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Oct 2 19:12:04.874102 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Oct 2 19:12:04.874197 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Oct 2 19:12:04.874319 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:12:04.874417 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:12:04.874509 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Oct 2 19:12:04.874599 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Oct 2 19:12:04.874709 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:12:04.874801 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Oct 2 19:12:04.874900 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Oct 2 19:12:04.874997 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Oct 2 19:12:04.875095 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Oct 2 19:12:04.875108 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:12:04.875118 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:12:04.875128 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:12:04.875137 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:12:04.875147 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:12:04.875157 kernel: iommu: Default domain type: Translated Oct 2 19:12:04.875167 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:12:04.875801 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:12:04.875908 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:12:04.876003 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:12:04.876016 kernel: vgaarb: loaded Oct 2 19:12:04.876026 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:12:04.876036 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:12:04.876047 kernel: PTP clock support registered Oct 2 19:12:04.876056 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:12:04.876066 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:12:04.876080 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:12:04.876090 kernel: e820: reserve RAM buffer [mem 0x9cfdd000-0x9fffffff] Oct 2 19:12:04.876099 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 2 19:12:04.876109 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 2 19:12:04.876119 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:12:04.876129 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:12:04.876139 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:12:04.876149 kernel: pnp: PnP ACPI init Oct 2 19:12:04.876285 kernel: pnp 00:02: [dma 2] Oct 2 19:12:04.876306 kernel: pnp: PnP ACPI: found 6 devices Oct 2 19:12:04.876319 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:12:04.876331 kernel: NET: Registered PF_INET protocol family Oct 2 19:12:04.876344 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:12:04.876356 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:12:04.876369 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:12:04.876381 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:12:04.876394 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:12:04.876408 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:12:04.876421 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:12:04.876433 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:12:04.876446 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:12:04.876458 kernel: NET: Registered PF_XDP protocol family Oct 2 19:12:04.876553 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:12:04.876634 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:12:04.876715 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:12:04.876801 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Oct 2 19:12:04.876891 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:12:04.876993 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:12:04.877087 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:12:04.877180 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:12:04.877192 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:12:04.877203 kernel: Initialise system trusted keyrings Oct 2 19:12:04.877225 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:12:04.877241 kernel: Key type asymmetric registered Oct 2 19:12:04.877253 kernel: Asymmetric key parser 'x509' registered Oct 2 19:12:04.877265 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:12:04.877278 kernel: io scheduler mq-deadline registered Oct 2 19:12:04.877290 kernel: io scheduler kyber registered Oct 2 19:12:04.877302 kernel: io scheduler bfq registered Oct 2 19:12:04.877315 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:12:04.877328 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:12:04.877340 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Oct 2 19:12:04.877352 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:12:04.877364 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:12:04.877374 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:12:04.877384 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:12:04.877394 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:12:04.877404 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:12:04.877414 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:12:04.877513 kernel: rtc_cmos 00:05: RTC can wake from S4 Oct 2 19:12:04.877597 kernel: rtc_cmos 00:05: registered as rtc0 Oct 2 19:12:04.877685 kernel: rtc_cmos 00:05: setting system clock to 2023-10-02T19:12:04 UTC (1696273924) Oct 2 19:12:04.877769 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 2 19:12:04.877782 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:12:04.877792 kernel: Segment Routing with IPv6 Oct 2 19:12:04.877802 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:12:04.877812 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:12:04.877822 kernel: Key type dns_resolver registered Oct 2 19:12:04.877832 kernel: IPI shorthand broadcast: enabled Oct 2 19:12:04.877844 kernel: sched_clock: Marking stable (497490283, 106930143)->(631919885, -27499459) Oct 2 19:12:04.877854 kernel: registered taskstats version 1 Oct 2 19:12:04.877865 kernel: Loading compiled-in X.509 certificates Oct 2 19:12:04.877875 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:12:04.877891 kernel: Key type .fscrypt registered Oct 2 19:12:04.877901 kernel: Key type fscrypt-provisioning registered Oct 2 19:12:04.877911 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:12:04.877921 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:12:04.877931 kernel: ima: No architecture policies found Oct 2 19:12:04.877943 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:12:04.877953 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:12:04.877963 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:12:04.877973 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:12:04.877983 kernel: Run /init as init process Oct 2 19:12:04.877993 kernel: with arguments: Oct 2 19:12:04.878003 kernel: /init Oct 2 19:12:04.878013 kernel: with environment: Oct 2 19:12:04.878035 kernel: HOME=/ Oct 2 19:12:04.878048 kernel: TERM=linux Oct 2 19:12:04.878058 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:12:04.878071 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:12:04.878084 systemd[1]: Detected virtualization kvm. Oct 2 19:12:04.878095 systemd[1]: Detected architecture x86-64. Oct 2 19:12:04.878106 systemd[1]: Running in initrd. Oct 2 19:12:04.878117 systemd[1]: No hostname configured, using default hostname. Oct 2 19:12:04.878129 systemd[1]: Hostname set to . Oct 2 19:12:04.878140 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:12:04.878151 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:12:04.878162 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:12:04.878173 systemd[1]: Reached target cryptsetup.target. Oct 2 19:12:04.878184 systemd[1]: Reached target paths.target. Oct 2 19:12:04.878195 systemd[1]: Reached target slices.target. Oct 2 19:12:04.878205 systemd[1]: Reached target swap.target. Oct 2 19:12:04.878233 systemd[1]: Reached target timers.target. Oct 2 19:12:04.878247 systemd[1]: Listening on iscsid.socket. Oct 2 19:12:04.878258 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:12:04.878269 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:12:04.878280 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:12:04.878291 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:12:04.878302 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:12:04.878313 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:12:04.878325 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:12:04.878336 systemd[1]: Reached target sockets.target. Oct 2 19:12:04.878347 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:12:04.878358 systemd[1]: Finished network-cleanup.service. Oct 2 19:12:04.878369 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:12:04.878380 systemd[1]: Starting systemd-journald.service... Oct 2 19:12:04.878391 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:12:04.878403 systemd[1]: Starting systemd-resolved.service... Oct 2 19:12:04.878414 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:12:04.878425 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:12:04.878436 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:12:04.878450 systemd-journald[197]: Journal started Oct 2 19:12:04.878504 systemd-journald[197]: Runtime Journal (/run/log/journal/5ad4716e37064acd9f5517403349c383) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:12:04.863781 systemd-modules-load[198]: Inserted module 'overlay' Oct 2 19:12:04.889637 systemd[1]: Started systemd-journald.service. Oct 2 19:12:04.889660 kernel: audit: type=1130 audit(1696273924.886:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.879663 systemd-resolved[199]: Positive Trust Anchors: Oct 2 19:12:04.892619 kernel: audit: type=1130 audit(1696273924.889:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.879674 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:12:04.958506 kernel: audit: type=1130 audit(1696273924.952:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.958539 kernel: audit: type=1130 audit(1696273924.954:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.879702 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:12:04.882070 systemd-resolved[199]: Defaulting to hostname 'linux'. Oct 2 19:12:04.890338 systemd[1]: Started systemd-resolved.service. Oct 2 19:12:04.953298 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:12:04.955167 systemd[1]: Reached target nss-lookup.target. Oct 2 19:12:04.959907 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:12:04.965435 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:12:04.976464 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:12:04.976539 kernel: Bridge firewalling registered Oct 2 19:12:04.975889 systemd-modules-load[198]: Inserted module 'br_netfilter' Oct 2 19:12:04.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.977586 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:12:04.981239 kernel: audit: type=1130 audit(1696273924.977:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.983073 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:12:04.986651 kernel: audit: type=1130 audit(1696273924.983:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.985377 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:12:04.997066 dracut-cmdline[217]: dracut-dracut-053 Oct 2 19:12:05.000070 dracut-cmdline[217]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:12:05.009251 kernel: SCSI subsystem initialized Oct 2 19:12:05.043405 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:12:05.043484 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:12:05.044808 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:12:05.050454 systemd-modules-load[198]: Inserted module 'dm_multipath' Oct 2 19:12:05.052295 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:12:05.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.055223 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:12:05.057411 kernel: audit: type=1130 audit(1696273925.053:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.063197 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:12:05.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.067231 kernel: audit: type=1130 audit(1696273925.064:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.081250 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:12:05.092245 kernel: iscsi: registered transport (tcp) Oct 2 19:12:05.126384 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:12:05.126425 kernel: QLogic iSCSI HBA Driver Oct 2 19:12:05.156915 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:12:05.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.178848 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:12:05.180802 kernel: audit: type=1130 audit(1696273925.177:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.225236 kernel: raid6: avx2x4 gen() 29854 MB/s Oct 2 19:12:05.262239 kernel: raid6: avx2x4 xor() 7411 MB/s Oct 2 19:12:05.279233 kernel: raid6: avx2x2 gen() 30663 MB/s Oct 2 19:12:05.296230 kernel: raid6: avx2x2 xor() 18778 MB/s Oct 2 19:12:05.314236 kernel: raid6: avx2x1 gen() 22294 MB/s Oct 2 19:12:05.331237 kernel: raid6: avx2x1 xor() 15243 MB/s Oct 2 19:12:05.348240 kernel: raid6: sse2x4 gen() 14493 MB/s Oct 2 19:12:05.365235 kernel: raid6: sse2x4 xor() 6766 MB/s Oct 2 19:12:05.401239 kernel: raid6: sse2x2 gen() 16098 MB/s Oct 2 19:12:05.418233 kernel: raid6: sse2x2 xor() 9586 MB/s Oct 2 19:12:05.435234 kernel: raid6: sse2x1 gen() 12347 MB/s Oct 2 19:12:05.452590 kernel: raid6: sse2x1 xor() 7499 MB/s Oct 2 19:12:05.452611 kernel: raid6: using algorithm avx2x2 gen() 30663 MB/s Oct 2 19:12:05.452626 kernel: raid6: .... xor() 18778 MB/s, rmw enabled Oct 2 19:12:05.452635 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:12:05.465236 kernel: xor: automatically using best checksumming function avx Oct 2 19:12:05.556242 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:12:05.564882 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:12:05.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.565000 audit: BPF prog-id=7 op=LOAD Oct 2 19:12:05.566000 audit: BPF prog-id=8 op=LOAD Oct 2 19:12:05.566720 systemd[1]: Starting systemd-udevd.service... Oct 2 19:12:05.580430 systemd-udevd[401]: Using default interface naming scheme 'v252'. Oct 2 19:12:05.585562 systemd[1]: Started systemd-udevd.service. Oct 2 19:12:05.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.586956 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:12:05.597916 dracut-pre-trigger[406]: rd.md=0: removing MD RAID activation Oct 2 19:12:05.639429 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:12:05.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.641336 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:12:05.681077 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:12:05.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:05.742240 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:12:05.744228 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:12:05.746242 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:12:05.759234 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:12:05.759273 kernel: AES CTR mode by8 optimization enabled Oct 2 19:12:05.762232 kernel: libata version 3.00 loaded. Oct 2 19:12:05.766246 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:12:05.776241 kernel: scsi host0: ata_piix Oct 2 19:12:05.777226 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (473) Oct 2 19:12:05.786169 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:12:05.806970 kernel: scsi host1: ata_piix Oct 2 19:12:05.807113 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Oct 2 19:12:05.807124 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Oct 2 19:12:05.810575 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:12:05.818422 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:12:05.818698 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:12:05.823932 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:12:05.825328 systemd[1]: Starting disk-uuid.service... Oct 2 19:12:05.899251 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:12:05.903225 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:12:05.907238 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:12:05.944292 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 2 19:12:05.947226 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 2 19:12:06.004243 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 2 19:12:06.004454 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:12:06.021282 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Oct 2 19:12:06.907247 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:12:06.907314 disk-uuid[523]: The operation has completed successfully. Oct 2 19:12:06.931443 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:12:06.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:06.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:06.931545 systemd[1]: Finished disk-uuid.service. Oct 2 19:12:06.939078 systemd[1]: Starting verity-setup.service... Oct 2 19:12:06.953238 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:12:06.985844 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:12:06.988232 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:12:06.990061 systemd[1]: Finished verity-setup.service. Oct 2 19:12:06.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.061050 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:12:07.062104 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:12:07.061747 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:12:07.062424 systemd[1]: Starting ignition-setup.service... Oct 2 19:12:07.063935 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:12:07.071292 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:12:07.071331 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:12:07.071340 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:12:07.080374 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:12:07.092290 systemd[1]: Finished ignition-setup.service. Oct 2 19:12:07.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.093865 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:12:07.129729 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:12:07.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.131000 audit: BPF prog-id=9 op=LOAD Oct 2 19:12:07.131839 systemd[1]: Starting systemd-networkd.service... Oct 2 19:12:07.155041 systemd-networkd[698]: lo: Link UP Oct 2 19:12:07.155054 systemd-networkd[698]: lo: Gained carrier Oct 2 19:12:07.155575 systemd-networkd[698]: Enumeration completed Oct 2 19:12:07.155709 systemd[1]: Started systemd-networkd.service. Oct 2 19:12:07.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.155863 systemd-networkd[698]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:12:07.156766 systemd[1]: Reached target network.target. Oct 2 19:12:07.157664 systemd-networkd[698]: eth0: Link UP Oct 2 19:12:07.157668 systemd-networkd[698]: eth0: Gained carrier Oct 2 19:12:07.159603 systemd[1]: Starting iscsiuio.service... Oct 2 19:12:07.175682 systemd[1]: Started iscsiuio.service. Oct 2 19:12:07.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.176989 systemd[1]: Starting iscsid.service... Oct 2 19:12:07.181056 iscsid[708]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:12:07.181056 iscsid[708]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:12:07.181056 iscsid[708]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:12:07.181056 iscsid[708]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:12:07.181056 iscsid[708]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:12:07.181056 iscsid[708]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:12:07.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.182270 systemd[1]: Started iscsid.service. Oct 2 19:12:07.186955 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:12:07.192362 systemd-networkd[698]: eth0: DHCPv4 address 10.0.0.71/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:12:07.202164 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:12:07.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.203354 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:12:07.204589 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:12:07.205354 systemd[1]: Reached target remote-fs.target. Oct 2 19:12:07.207043 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:12:07.216146 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:12:07.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.238904 ignition[636]: Ignition 2.14.0 Oct 2 19:12:07.238929 ignition[636]: Stage: fetch-offline Oct 2 19:12:07.238995 ignition[636]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:12:07.239008 ignition[636]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:12:07.239125 ignition[636]: parsed url from cmdline: "" Oct 2 19:12:07.239128 ignition[636]: no config URL provided Oct 2 19:12:07.239133 ignition[636]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:12:07.239140 ignition[636]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:12:07.239159 ignition[636]: op(1): [started] loading QEMU firmware config module Oct 2 19:12:07.239164 ignition[636]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:12:07.245313 ignition[636]: op(1): [finished] loading QEMU firmware config module Oct 2 19:12:07.273458 ignition[636]: parsing config with SHA512: 1b7d232afb44d39b8fabc493db9bbe58f899cd5ae921745f818c663ad61ba92b9a72f4c98b70ebab220fa168491907bd326f789f8333c75e9a3abf4d9a40bebf Oct 2 19:12:07.300513 unknown[636]: fetched base config from "system" Oct 2 19:12:07.300525 unknown[636]: fetched user config from "qemu" Oct 2 19:12:07.300954 ignition[636]: fetch-offline: fetch-offline passed Oct 2 19:12:07.302043 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:12:07.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.301005 ignition[636]: Ignition finished successfully Oct 2 19:12:07.303382 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:12:07.304226 systemd[1]: Starting ignition-kargs.service... Oct 2 19:12:07.314230 ignition[724]: Ignition 2.14.0 Oct 2 19:12:07.314242 ignition[724]: Stage: kargs Oct 2 19:12:07.314363 ignition[724]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:12:07.314376 ignition[724]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:12:07.317381 systemd[1]: Finished ignition-kargs.service. Oct 2 19:12:07.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.315871 ignition[724]: kargs: kargs passed Oct 2 19:12:07.315936 ignition[724]: Ignition finished successfully Oct 2 19:12:07.319352 systemd[1]: Starting ignition-disks.service... Oct 2 19:12:07.327004 ignition[730]: Ignition 2.14.0 Oct 2 19:12:07.327014 ignition[730]: Stage: disks Oct 2 19:12:07.327105 ignition[730]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:12:07.327114 ignition[730]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:12:07.329058 systemd[1]: Finished ignition-disks.service. Oct 2 19:12:07.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.328137 ignition[730]: disks: disks passed Oct 2 19:12:07.330526 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:12:07.328175 ignition[730]: Ignition finished successfully Oct 2 19:12:07.331667 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:12:07.332362 systemd[1]: Reached target local-fs.target. Oct 2 19:12:07.332931 systemd[1]: Reached target sysinit.target. Oct 2 19:12:07.333393 systemd[1]: Reached target basic.target. Oct 2 19:12:07.334519 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:12:07.346270 systemd-fsck[738]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:12:07.351123 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:12:07.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.353793 systemd[1]: Mounting sysroot.mount... Oct 2 19:12:07.360228 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:12:07.360968 systemd[1]: Mounted sysroot.mount. Oct 2 19:12:07.362276 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:12:07.364645 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:12:07.366131 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:12:07.366188 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:12:07.367075 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:12:07.370121 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:12:07.372142 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:12:07.377172 initrd-setup-root[748]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:12:07.381454 initrd-setup-root[756]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:12:07.384526 initrd-setup-root[764]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:12:07.387877 initrd-setup-root[772]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:12:07.419839 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:12:07.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.421841 systemd[1]: Starting ignition-mount.service... Oct 2 19:12:07.423404 systemd[1]: Starting sysroot-boot.service... Oct 2 19:12:07.427429 bash[789]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:12:07.436782 ignition[790]: INFO : Ignition 2.14.0 Oct 2 19:12:07.437841 ignition[790]: INFO : Stage: mount Oct 2 19:12:07.437841 ignition[790]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:12:07.437841 ignition[790]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:12:07.439829 ignition[790]: INFO : mount: mount passed Oct 2 19:12:07.439829 ignition[790]: INFO : Ignition finished successfully Oct 2 19:12:07.441581 systemd[1]: Finished ignition-mount.service. Oct 2 19:12:07.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:07.443552 systemd[1]: Finished sysroot-boot.service. Oct 2 19:12:07.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:08.001038 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:12:08.007449 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (799) Oct 2 19:12:08.007476 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:12:08.007492 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:12:08.008439 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:12:08.011766 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:12:08.012975 systemd[1]: Starting ignition-files.service... Oct 2 19:12:08.025830 ignition[819]: INFO : Ignition 2.14.0 Oct 2 19:12:08.025830 ignition[819]: INFO : Stage: files Oct 2 19:12:08.027258 ignition[819]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:12:08.027258 ignition[819]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:12:08.028954 ignition[819]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:12:08.029769 ignition[819]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:12:08.029769 ignition[819]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:12:08.031977 ignition[819]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:12:08.033165 ignition[819]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:12:08.034745 unknown[819]: wrote ssh authorized keys file for user: core Oct 2 19:12:08.035638 ignition[819]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:12:08.037177 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:12:08.037177 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:12:08.230455 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:12:08.382348 ignition[819]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:12:08.382348 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:12:08.386150 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:12:08.386150 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:12:08.482721 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:12:08.554079 ignition[819]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:12:08.556309 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:12:08.556309 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:12:08.556309 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:12:08.637401 systemd-networkd[698]: eth0: Gained IPv6LL Oct 2 19:12:08.652232 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:12:09.382393 ignition[819]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 19:12:09.382393 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:12:09.387108 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:12:09.387108 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:12:09.443349 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:12:10.778980 ignition[819]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 19:12:10.781340 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:12:10.781340 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:12:10.781340 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:12:10.849049 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:12:11.576662 ignition[819]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 19:12:11.578550 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:12:11.578550 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:12:11.578550 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:12:11.578550 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:12:11.578550 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:12:11.578550 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:12:11.578550 ignition[819]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(b): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(b): op(c): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(b): op(c): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(b): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(d): [started] processing unit "prepare-critools.service" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(d): op(e): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(d): op(e): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(d): [finished] processing unit "prepare-critools.service" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(f): [started] processing unit "coreos-metadata.service" Oct 2 19:12:11.578550 ignition[819]: INFO : files: op(f): op(10): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:12:11.596451 ignition[819]: INFO : files: op(f): op(10): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:12:11.596451 ignition[819]: INFO : files: op(f): [finished] processing unit "coreos-metadata.service" Oct 2 19:12:11.596451 ignition[819]: INFO : files: op(11): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:12:11.596451 ignition[819]: INFO : files: op(11): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:12:11.596451 ignition[819]: INFO : files: op(12): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:12:11.596451 ignition[819]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:12:11.596451 ignition[819]: INFO : files: op(13): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:12:11.596451 ignition[819]: INFO : files: op(13): op(14): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:12:11.830297 ignition[819]: INFO : files: op(13): op(14): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:12:11.831593 ignition[819]: INFO : files: op(13): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:12:11.831593 ignition[819]: INFO : files: createResultFile: createFiles: op(15): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:12:11.831593 ignition[819]: INFO : files: createResultFile: createFiles: op(15): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:12:11.831593 ignition[819]: INFO : files: files passed Oct 2 19:12:11.831593 ignition[819]: INFO : Ignition finished successfully Oct 2 19:12:11.840447 kernel: kauditd_printk_skb: 24 callbacks suppressed Oct 2 19:12:11.840469 kernel: audit: type=1130 audit(1696273931.832:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.832065 systemd[1]: Finished ignition-files.service. Oct 2 19:12:11.834224 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:12:11.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.837884 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:12:11.848262 kernel: audit: type=1130 audit(1696273931.842:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.848283 kernel: audit: type=1131 audit(1696273931.842:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.848293 kernel: audit: type=1130 audit(1696273931.848:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.848355 initrd-setup-root-after-ignition[843]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:12:11.838545 systemd[1]: Starting ignition-quench.service... Oct 2 19:12:11.852660 initrd-setup-root-after-ignition[847]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:12:11.841741 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:12:11.841839 systemd[1]: Finished ignition-quench.service. Oct 2 19:12:11.842664 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:12:11.848413 systemd[1]: Reached target ignition-complete.target. Oct 2 19:12:11.853206 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:12:11.865493 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:12:11.865608 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:12:11.871533 kernel: audit: type=1130 audit(1696273931.866:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.871563 kernel: audit: type=1131 audit(1696273931.866:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.866919 systemd[1]: Reached target initrd-fs.target. Oct 2 19:12:11.871838 systemd[1]: Reached target initrd.target. Oct 2 19:12:11.872070 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:12:11.873449 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:12:11.885048 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:12:11.888545 kernel: audit: type=1130 audit(1696273931.885:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.888562 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:12:11.898017 systemd[1]: Stopped target network.target. Oct 2 19:12:11.898430 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:12:11.899535 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:12:11.901241 systemd[1]: Stopped target timers.target. Oct 2 19:12:11.901597 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:12:11.905555 kernel: audit: type=1131 audit(1696273931.902:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.901714 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:12:11.902771 systemd[1]: Stopped target initrd.target. Oct 2 19:12:11.905893 systemd[1]: Stopped target basic.target. Oct 2 19:12:11.906101 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:12:11.907805 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:12:11.908019 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:12:11.910007 systemd[1]: Stopped target remote-fs.target. Oct 2 19:12:11.910250 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:12:11.912324 systemd[1]: Stopped target sysinit.target. Oct 2 19:12:11.913493 systemd[1]: Stopped target local-fs.target. Oct 2 19:12:11.914458 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:12:11.915499 systemd[1]: Stopped target swap.target. Oct 2 19:12:11.920389 kernel: audit: type=1131 audit(1696273931.917:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.915740 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:12:11.915847 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:12:11.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.917708 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:12:11.924412 kernel: audit: type=1131 audit(1696273931.921:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.920673 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:12:11.920775 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:12:11.921881 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:12:11.922001 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:12:11.924340 systemd[1]: Stopped target paths.target. Oct 2 19:12:11.924553 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:12:11.929261 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:12:11.929675 systemd[1]: Stopped target slices.target. Oct 2 19:12:11.931446 systemd[1]: Stopped target sockets.target. Oct 2 19:12:11.932472 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:12:11.932566 systemd[1]: Closed iscsid.socket. Oct 2 19:12:11.933498 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:12:11.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.933584 systemd[1]: Closed iscsiuio.socket. Oct 2 19:12:11.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.934593 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:12:11.934707 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:12:11.935466 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:12:11.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.935568 systemd[1]: Stopped ignition-files.service. Oct 2 19:12:11.937658 systemd[1]: Stopping ignition-mount.service... Oct 2 19:12:11.938489 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:12:11.938609 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:12:11.940433 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:12:11.944546 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:12:11.945804 ignition[860]: INFO : Ignition 2.14.0 Oct 2 19:12:11.945804 ignition[860]: INFO : Stage: umount Oct 2 19:12:11.945804 ignition[860]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:12:11.945804 ignition[860]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:12:11.947614 ignition[860]: INFO : umount: umount passed Oct 2 19:12:11.947614 ignition[860]: INFO : Ignition finished successfully Oct 2 19:12:11.946548 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:12:11.950709 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:12:11.951731 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:12:11.952271 systemd-networkd[698]: eth0: DHCPv6 lease lost Oct 2 19:12:11.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.953819 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:12:11.954693 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:12:11.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.958628 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:12:11.960141 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:12:11.960796 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:12:11.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.962538 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:12:11.963188 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:12:11.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.964853 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:12:11.965495 systemd[1]: Stopped ignition-mount.service. Oct 2 19:12:11.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.966843 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:12:11.967551 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:12:11.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.968000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:12:11.968000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:12:11.968979 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:12:11.969697 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:12:11.970714 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:12:11.971374 systemd[1]: Stopped ignition-disks.service. Oct 2 19:12:11.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.972434 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:12:11.972474 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:12:11.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.974120 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:12:11.974161 systemd[1]: Stopped ignition-setup.service. Oct 2 19:12:11.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.975936 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:12:11.975979 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:12:11.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.978199 systemd[1]: Stopping network-cleanup.service... Oct 2 19:12:11.979443 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:12:11.980223 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:12:11.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.981451 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:12:11.981502 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:12:11.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.983234 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:12:11.983287 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:12:11.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.985245 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:12:11.987384 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:12:11.988808 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:12:11.989641 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:12:11.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.992861 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:12:11.993544 systemd[1]: Stopped network-cleanup.service. Oct 2 19:12:11.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.995058 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:12:11.995847 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:12:11.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:11.997414 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:12:11.997464 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:12:11.999238 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:12:11.999284 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:12:12.000948 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:12:12.000999 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:12:12.002000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:12.002722 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:12:12.002766 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:12:12.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:12.004385 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:12:12.004430 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:12:12.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:12.007059 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:12:12.008310 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:12:12.008360 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:12:12.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:12.012388 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:12:12.013182 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:12:12.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:12.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:12.014657 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:12:12.016523 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:12:12.033719 systemd[1]: Switching root. Oct 2 19:12:12.052878 iscsid[708]: iscsid shutting down. Oct 2 19:12:12.053504 systemd-journald[197]: Received SIGTERM from PID 1 (systemd). Oct 2 19:12:12.053539 systemd-journald[197]: Journal stopped Oct 2 19:12:15.090709 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:12:15.090779 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:12:15.090805 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:12:15.090819 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:12:15.090841 kernel: SELinux: policy capability open_perms=1 Oct 2 19:12:15.090854 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:12:15.090868 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:12:15.090883 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:12:15.090901 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:12:15.090914 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:12:15.090927 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:12:15.090943 systemd[1]: Successfully loaded SELinux policy in 39.320ms. Oct 2 19:12:15.090963 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.520ms. Oct 2 19:12:15.090985 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:12:15.091005 systemd[1]: Detected virtualization kvm. Oct 2 19:12:15.091690 systemd[1]: Detected architecture x86-64. Oct 2 19:12:15.091711 systemd[1]: Detected first boot. Oct 2 19:12:15.091726 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:12:15.091746 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:12:15.091763 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:12:15.091780 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:12:15.091797 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:12:15.091814 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:12:15.091829 systemd[1]: Stopped iscsiuio.service. Oct 2 19:12:15.091845 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:12:15.091863 systemd[1]: Stopped iscsid.service. Oct 2 19:12:15.091879 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:12:15.091895 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:12:15.091913 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:12:15.091929 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:12:15.091944 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:12:15.091965 systemd[1]: Created slice system-getty.slice. Oct 2 19:12:15.091981 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:12:15.091997 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:12:15.092016 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:12:15.092031 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:12:15.092047 systemd[1]: Created slice user.slice. Oct 2 19:12:15.092062 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:12:15.092078 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:12:15.092093 systemd[1]: Set up automount boot.automount. Oct 2 19:12:15.092109 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:12:15.092124 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:12:15.092143 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:12:15.092159 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:12:15.092176 systemd[1]: Reached target integritysetup.target. Oct 2 19:12:15.092191 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:12:15.092226 systemd[1]: Reached target remote-fs.target. Oct 2 19:12:15.092244 systemd[1]: Reached target slices.target. Oct 2 19:12:15.092260 systemd[1]: Reached target swap.target. Oct 2 19:12:15.092275 systemd[1]: Reached target torcx.target. Oct 2 19:12:15.092291 systemd[1]: Reached target veritysetup.target. Oct 2 19:12:15.092318 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:12:15.092334 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:12:15.092350 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:12:15.092366 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:12:15.092384 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:12:15.092399 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:12:15.093063 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:12:15.093085 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:12:15.093101 systemd[1]: Mounting media.mount... Oct 2 19:12:15.093117 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:12:15.093137 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:12:15.093152 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:12:15.093167 systemd[1]: Mounting tmp.mount... Oct 2 19:12:15.093183 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:12:15.093200 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:12:15.093229 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:12:15.093246 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:12:15.093262 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:12:15.093277 systemd[1]: Starting modprobe@drm.service... Oct 2 19:12:15.093297 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:12:15.093312 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:12:15.093328 systemd[1]: Starting modprobe@loop.service... Oct 2 19:12:15.093345 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:12:15.093360 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:12:15.093376 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:12:15.093399 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:12:15.093414 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:12:15.093433 systemd[1]: Stopped systemd-journald.service. Oct 2 19:12:15.093447 kernel: loop: module loaded Oct 2 19:12:15.093463 systemd[1]: Starting systemd-journald.service... Oct 2 19:12:15.093477 kernel: fuse: init (API version 7.34) Oct 2 19:12:15.093492 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:12:15.093508 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:12:15.093525 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:12:15.093541 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:12:15.093556 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:12:15.093571 systemd[1]: Stopped verity-setup.service. Oct 2 19:12:15.093617 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:12:15.093634 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:12:15.093650 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:12:15.093665 systemd[1]: Mounted media.mount. Oct 2 19:12:15.094177 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:12:15.094200 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:12:15.094241 systemd[1]: Mounted tmp.mount. Oct 2 19:12:15.094262 systemd-journald[966]: Journal started Oct 2 19:12:15.094337 systemd-journald[966]: Runtime Journal (/run/log/journal/5ad4716e37064acd9f5517403349c383) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:12:12.129000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:12:12.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:12:12.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:12:12.650000 audit: BPF prog-id=10 op=LOAD Oct 2 19:12:12.650000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:12:12.650000 audit: BPF prog-id=11 op=LOAD Oct 2 19:12:12.650000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:12:14.970000 audit: BPF prog-id=12 op=LOAD Oct 2 19:12:14.970000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:12:14.970000 audit: BPF prog-id=13 op=LOAD Oct 2 19:12:14.970000 audit: BPF prog-id=14 op=LOAD Oct 2 19:12:14.970000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:12:14.970000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:12:14.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:14.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:14.977000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:12:14.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:14.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:14.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.067000 audit: BPF prog-id=15 op=LOAD Oct 2 19:12:15.067000 audit: BPF prog-id=16 op=LOAD Oct 2 19:12:15.067000 audit: BPF prog-id=17 op=LOAD Oct 2 19:12:15.067000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:12:15.067000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:12:15.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.086000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:12:15.086000 audit[966]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffd59b58930 a2=4000 a3=7ffd59b589cc items=0 ppid=1 pid=966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.086000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:12:12.726781 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:12:14.967285 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:12:12.727381 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:12:14.967299 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:12:12.727397 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:12:14.972641 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:12:12.727431 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:12:12.727443 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:12:15.096660 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:12:12.727480 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:12:15.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:12.727494 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:12:12.727707 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:12:12.727741 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:12:12.727752 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:12:12.728532 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:12:12.728579 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:12:15.098345 systemd[1]: Started systemd-journald.service. Oct 2 19:12:15.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:12.728598 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:12:12.728611 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:12:12.728631 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:12:12.728644 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:12:15.098813 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:12:14.640800 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:14Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:12:14.641177 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:14Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:12:15.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.099163 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:12:14.641364 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:14Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:12:14.641593 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:14Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:12:14.641671 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:14Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:12:15.100272 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:12:14.641747 /usr/lib/systemd/system-generators/torcx-generator[893]: time="2023-10-02T19:12:14Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:12:15.100426 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:12:15.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.101579 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:12:15.102359 systemd[1]: Finished modprobe@drm.service. Oct 2 19:12:15.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.103235 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:12:15.103365 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:12:15.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.104305 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:12:15.104424 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:12:15.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.105291 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:12:15.105410 systemd[1]: Finished modprobe@loop.service. Oct 2 19:12:15.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.106301 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:12:15.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.107238 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:12:15.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.108194 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:12:15.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.109312 systemd[1]: Reached target network-pre.target. Oct 2 19:12:15.111289 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:12:15.112884 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:12:15.113488 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:12:15.116345 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:12:15.117953 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:12:15.118711 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:12:15.119664 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:12:15.120708 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:12:15.121916 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:12:15.125513 systemd-journald[966]: Time spent on flushing to /var/log/journal/5ad4716e37064acd9f5517403349c383 is 13.445ms for 1082 entries. Oct 2 19:12:15.125513 systemd-journald[966]: System Journal (/var/log/journal/5ad4716e37064acd9f5517403349c383) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:12:15.156514 systemd-journald[966]: Received client request to flush runtime journal. Oct 2 19:12:15.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.126162 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:12:15.128248 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:12:15.129058 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:12:15.131313 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:12:15.132557 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:12:15.133341 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:12:15.147068 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:12:15.156062 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:12:15.158336 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:12:15.159688 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:12:15.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.160820 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:12:15.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.168757 udevadm[998]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:12:15.604730 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:12:15.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.606000 audit: BPF prog-id=18 op=LOAD Oct 2 19:12:15.606000 audit: BPF prog-id=19 op=LOAD Oct 2 19:12:15.606000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:12:15.606000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:12:15.607405 systemd[1]: Starting systemd-udevd.service... Oct 2 19:12:15.623754 systemd-udevd[999]: Using default interface naming scheme 'v252'. Oct 2 19:12:15.641400 systemd[1]: Started systemd-udevd.service. Oct 2 19:12:15.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.643000 audit: BPF prog-id=20 op=LOAD Oct 2 19:12:15.644404 systemd[1]: Starting systemd-networkd.service... Oct 2 19:12:15.654000 audit: BPF prog-id=21 op=LOAD Oct 2 19:12:15.654000 audit: BPF prog-id=22 op=LOAD Oct 2 19:12:15.654000 audit: BPF prog-id=23 op=LOAD Oct 2 19:12:15.655120 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:12:15.671940 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:12:15.691148 systemd[1]: Started systemd-userdbd.service. Oct 2 19:12:15.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.718267 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:12:15.723290 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:12:15.725259 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:12:15.741000 audit[1004]: AVC avc: denied { confidentiality } for pid=1004 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:12:15.746347 systemd-networkd[1007]: lo: Link UP Oct 2 19:12:15.746360 systemd-networkd[1007]: lo: Gained carrier Oct 2 19:12:15.746973 systemd-networkd[1007]: Enumeration completed Oct 2 19:12:15.747089 systemd[1]: Started systemd-networkd.service. Oct 2 19:12:15.747113 systemd-networkd[1007]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:12:15.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.749225 systemd-networkd[1007]: eth0: Link UP Oct 2 19:12:15.749233 systemd-networkd[1007]: eth0: Gained carrier Oct 2 19:12:15.741000 audit[1004]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55ed4474ac30 a1=32194 a2=7fa9fe115bc5 a3=5 items=106 ppid=999 pid=1004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.741000 audit: CWD cwd="/" Oct 2 19:12:15.741000 audit: PATH item=0 name=(null) inode=14846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=1 name=(null) inode=14847 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=2 name=(null) inode=14846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=3 name=(null) inode=14848 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=4 name=(null) inode=14846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=5 name=(null) inode=14849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=6 name=(null) inode=14849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=7 name=(null) inode=14850 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=8 name=(null) inode=14849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=9 name=(null) inode=14851 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=10 name=(null) inode=14849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=11 name=(null) inode=14852 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=12 name=(null) inode=14849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=13 name=(null) inode=14853 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=14 name=(null) inode=14849 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=15 name=(null) inode=14854 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=16 name=(null) inode=14846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=17 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=18 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=19 name=(null) inode=14856 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=20 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=21 name=(null) inode=14857 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=22 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=23 name=(null) inode=14858 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=24 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=25 name=(null) inode=14859 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=26 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=27 name=(null) inode=14860 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=28 name=(null) inode=14846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=29 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=30 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=31 name=(null) inode=14862 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=32 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=33 name=(null) inode=14863 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=34 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=35 name=(null) inode=14864 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=36 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=37 name=(null) inode=14865 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=38 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=39 name=(null) inode=14866 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=40 name=(null) inode=14846 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=41 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=42 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=43 name=(null) inode=14868 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=44 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=45 name=(null) inode=14869 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=46 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=47 name=(null) inode=14870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=48 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=49 name=(null) inode=14871 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=50 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=51 name=(null) inode=14872 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=52 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=53 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=54 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=55 name=(null) inode=14874 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=56 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=57 name=(null) inode=14875 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=58 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=59 name=(null) inode=14876 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=60 name=(null) inode=14876 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=61 name=(null) inode=14877 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=62 name=(null) inode=14876 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=63 name=(null) inode=14878 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=64 name=(null) inode=14876 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=65 name=(null) inode=14879 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=66 name=(null) inode=14876 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=67 name=(null) inode=14880 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=68 name=(null) inode=14876 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=69 name=(null) inode=14881 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=70 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=71 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=72 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=73 name=(null) inode=14883 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=74 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=75 name=(null) inode=14884 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=76 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=77 name=(null) inode=14885 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=78 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=79 name=(null) inode=14886 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=80 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=81 name=(null) inode=14887 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=82 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=83 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=84 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=85 name=(null) inode=14889 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=86 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=87 name=(null) inode=14890 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=88 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=89 name=(null) inode=14891 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=90 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=91 name=(null) inode=14892 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=92 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=93 name=(null) inode=14893 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=94 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=95 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.766619 systemd-networkd[1007]: eth0: DHCPv4 address 10.0.0.71/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:12:15.741000 audit: PATH item=96 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=97 name=(null) inode=14895 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=98 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=99 name=(null) inode=14896 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=100 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=101 name=(null) inode=14897 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=102 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=103 name=(null) inode=14898 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=104 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PATH item=105 name=(null) inode=14899 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:12:15.741000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:12:15.776233 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:12:15.779235 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:12:15.783257 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:12:15.846242 kernel: kvm: Nested Virtualization enabled Oct 2 19:12:15.846428 kernel: SVM: kvm: Nested Paging enabled Oct 2 19:12:15.860234 kernel: EDAC MC: Ver: 3.0.0 Oct 2 19:12:15.879701 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:12:15.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.882066 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:12:15.899464 lvm[1034]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:12:15.923096 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:12:15.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.924050 systemd[1]: Reached target cryptsetup.target. Oct 2 19:12:15.926084 systemd[1]: Starting lvm2-activation.service... Oct 2 19:12:15.930011 lvm[1035]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:12:15.959236 systemd[1]: Finished lvm2-activation.service. Oct 2 19:12:15.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.960123 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:12:15.960855 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:12:15.960885 systemd[1]: Reached target local-fs.target. Oct 2 19:12:15.961555 systemd[1]: Reached target machines.target. Oct 2 19:12:15.963626 systemd[1]: Starting ldconfig.service... Oct 2 19:12:15.964527 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:12:15.964571 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:12:15.965584 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:12:15.967279 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:12:15.969460 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:12:15.970748 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:12:15.970814 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:12:15.972005 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:12:15.975870 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1037 (bootctl) Oct 2 19:12:15.977755 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:12:15.980607 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:12:15.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:15.994042 systemd-tmpfiles[1040]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:12:15.996287 systemd-tmpfiles[1040]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:12:16.003013 systemd-tmpfiles[1040]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:12:16.025421 systemd-fsck[1047]: fsck.fat 4.2 (2021-01-31) Oct 2 19:12:16.025421 systemd-fsck[1047]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:12:16.027205 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:12:16.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:16.030678 systemd[1]: Mounting boot.mount... Oct 2 19:12:16.301304 systemd[1]: Mounted boot.mount. Oct 2 19:12:16.313751 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:12:16.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:16.367197 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:12:16.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:16.374376 systemd[1]: Starting audit-rules.service... Oct 2 19:12:16.375763 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:12:16.377601 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:12:16.379000 audit: BPF prog-id=24 op=LOAD Oct 2 19:12:16.382367 systemd[1]: Starting systemd-resolved.service... Oct 2 19:12:16.383000 audit: BPF prog-id=25 op=LOAD Oct 2 19:12:16.384689 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:12:16.386586 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:12:16.387865 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:12:16.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:16.388822 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:12:16.427000 audit[1061]: SYSTEM_BOOT pid=1061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:12:16.430295 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:12:16.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:16.436650 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:12:16.437651 systemd[1]: Reached target time-set.target. Oct 2 19:12:16.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:16.438095 systemd-timesyncd[1060]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:12:16.438482 systemd-timesyncd[1060]: Initial clock synchronization to Mon 2023-10-02 19:12:16.837423 UTC. Oct 2 19:12:16.438698 systemd-resolved[1057]: Positive Trust Anchors: Oct 2 19:12:16.438717 systemd-resolved[1057]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:12:16.438753 systemd-resolved[1057]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:12:16.560836 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:12:16.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:16.562000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:12:16.562000 audit[1071]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd9d6804a0 a2=420 a3=0 items=0 ppid=1050 pid=1071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.562000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:12:16.562996 augenrules[1071]: No rules Oct 2 19:12:16.563531 systemd[1]: Finished audit-rules.service. Oct 2 19:12:16.684804 systemd-resolved[1057]: Defaulting to hostname 'linux'. Oct 2 19:12:16.686257 systemd[1]: Started systemd-resolved.service. Oct 2 19:12:16.686988 systemd[1]: Reached target network.target. Oct 2 19:12:16.687568 systemd[1]: Reached target nss-lookup.target. Oct 2 19:12:16.938967 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:12:16.939504 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:12:17.058871 ldconfig[1036]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:12:17.064850 systemd[1]: Finished ldconfig.service. Oct 2 19:12:17.066729 systemd[1]: Starting systemd-update-done.service... Oct 2 19:12:17.073041 systemd[1]: Finished systemd-update-done.service. Oct 2 19:12:17.073893 systemd[1]: Reached target sysinit.target. Oct 2 19:12:17.074571 systemd[1]: Started motdgen.path. Oct 2 19:12:17.075122 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:12:17.076195 systemd[1]: Started logrotate.timer. Oct 2 19:12:17.076812 systemd[1]: Started mdadm.timer. Oct 2 19:12:17.077304 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:12:17.077910 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:12:17.077935 systemd[1]: Reached target paths.target. Oct 2 19:12:17.078461 systemd[1]: Reached target timers.target. Oct 2 19:12:17.079264 systemd[1]: Listening on dbus.socket. Oct 2 19:12:17.080755 systemd[1]: Starting docker.socket... Oct 2 19:12:17.083927 systemd[1]: Listening on sshd.socket. Oct 2 19:12:17.084605 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:12:17.084947 systemd[1]: Listening on docker.socket. Oct 2 19:12:17.085560 systemd[1]: Reached target sockets.target. Oct 2 19:12:17.086138 systemd[1]: Reached target basic.target. Oct 2 19:12:17.086716 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:12:17.086745 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:12:17.087691 systemd[1]: Starting containerd.service... Oct 2 19:12:17.089297 systemd[1]: Starting dbus.service... Oct 2 19:12:17.090992 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:12:17.092768 systemd[1]: Starting extend-filesystems.service... Oct 2 19:12:17.093482 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:12:17.094558 systemd[1]: Starting motdgen.service... Oct 2 19:12:17.100443 jq[1083]: false Oct 2 19:12:17.097618 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:12:17.099531 systemd[1]: Starting prepare-critools.service... Oct 2 19:12:17.101435 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:12:17.103643 systemd[1]: Starting sshd-keygen.service... Oct 2 19:12:17.109701 systemd[1]: Starting systemd-logind.service... Oct 2 19:12:17.110639 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:12:17.110718 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:12:17.111357 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:12:17.112426 systemd[1]: Starting update-engine.service... Oct 2 19:12:17.114542 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:12:17.117320 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:12:17.117549 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:12:17.120282 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:12:17.121805 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:12:17.125396 jq[1102]: true Oct 2 19:12:17.126777 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:12:17.136401 tar[1105]: ./ Oct 2 19:12:17.136401 tar[1105]: ./loopback Oct 2 19:12:17.131005 dbus-daemon[1082]: [system] SELinux support is enabled Oct 2 19:12:17.136890 extend-filesystems[1084]: Found sr0 Oct 2 19:12:17.136890 extend-filesystems[1084]: Found vda Oct 2 19:12:17.136890 extend-filesystems[1084]: Found vda1 Oct 2 19:12:17.136890 extend-filesystems[1084]: Found vda2 Oct 2 19:12:17.136890 extend-filesystems[1084]: Found vda3 Oct 2 19:12:17.136890 extend-filesystems[1084]: Found usr Oct 2 19:12:17.136890 extend-filesystems[1084]: Found vda4 Oct 2 19:12:17.136890 extend-filesystems[1084]: Found vda6 Oct 2 19:12:17.136890 extend-filesystems[1084]: Found vda7 Oct 2 19:12:17.136890 extend-filesystems[1084]: Found vda9 Oct 2 19:12:17.136890 extend-filesystems[1084]: Checking size of /dev/vda9 Oct 2 19:12:17.128509 systemd[1]: Finished motdgen.service. Oct 2 19:12:17.169482 tar[1106]: crictl Oct 2 19:12:17.169726 extend-filesystems[1084]: Old size kept for /dev/vda9 Oct 2 19:12:17.170625 jq[1107]: true Oct 2 19:12:17.131161 systemd[1]: Started dbus.service. Oct 2 19:12:17.134297 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:12:17.134323 systemd[1]: Reached target system-config.target. Oct 2 19:12:17.135092 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:12:17.135112 systemd[1]: Reached target user-config.target. Oct 2 19:12:17.156714 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:12:17.156913 systemd[1]: Finished extend-filesystems.service. Oct 2 19:12:17.190549 update_engine[1101]: I1002 19:12:17.189963 1101 main.cc:92] Flatcar Update Engine starting Oct 2 19:12:17.191050 bash[1135]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:12:17.193398 systemd[1]: Started update-engine.service. Oct 2 19:12:17.193585 update_engine[1101]: I1002 19:12:17.193428 1101 update_check_scheduler.cc:74] Next update check in 6m38s Oct 2 19:12:17.195627 systemd[1]: Started locksmithd.service. Oct 2 19:12:17.196499 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:12:17.196932 env[1108]: time="2023-10-02T19:12:17.196849820Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:12:17.207026 tar[1105]: ./bandwidth Oct 2 19:12:17.208744 systemd-logind[1096]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:12:17.208766 systemd-logind[1096]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:12:17.209952 systemd-logind[1096]: New seat seat0. Oct 2 19:12:17.215887 systemd[1]: Started systemd-logind.service. Oct 2 19:12:17.229655 env[1108]: time="2023-10-02T19:12:17.229593958Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:12:17.229837 env[1108]: time="2023-10-02T19:12:17.229808440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:12:17.231120 env[1108]: time="2023-10-02T19:12:17.231085530Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:12:17.231120 env[1108]: time="2023-10-02T19:12:17.231115288Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:12:17.231355 env[1108]: time="2023-10-02T19:12:17.231324994Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:12:17.231355 env[1108]: time="2023-10-02T19:12:17.231349315Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:12:17.231510 env[1108]: time="2023-10-02T19:12:17.231361706Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:12:17.231510 env[1108]: time="2023-10-02T19:12:17.231371299Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:12:17.231510 env[1108]: time="2023-10-02T19:12:17.231438536Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:12:17.231680 env[1108]: time="2023-10-02T19:12:17.231651209Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:12:17.231786 env[1108]: time="2023-10-02T19:12:17.231757041Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:12:17.231786 env[1108]: time="2023-10-02T19:12:17.231777416Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:12:17.231875 env[1108]: time="2023-10-02T19:12:17.231827319Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:12:17.231875 env[1108]: time="2023-10-02T19:12:17.231838658Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:12:17.236932 env[1108]: time="2023-10-02T19:12:17.236899753Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:12:17.236932 env[1108]: time="2023-10-02T19:12:17.236932961Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:12:17.237027 env[1108]: time="2023-10-02T19:12:17.236946478Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:12:17.237027 env[1108]: time="2023-10-02T19:12:17.236972849Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:12:17.237027 env[1108]: time="2023-10-02T19:12:17.236984578Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:12:17.237027 env[1108]: time="2023-10-02T19:12:17.236997001Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:12:17.237027 env[1108]: time="2023-10-02T19:12:17.237008982Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:12:17.237027 env[1108]: time="2023-10-02T19:12:17.237021373Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:12:17.237209 env[1108]: time="2023-10-02T19:12:17.237033955Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:12:17.237209 env[1108]: time="2023-10-02T19:12:17.237046734Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:12:17.237209 env[1108]: time="2023-10-02T19:12:17.237058737Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:12:17.237209 env[1108]: time="2023-10-02T19:12:17.237069782Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:12:17.237209 env[1108]: time="2023-10-02T19:12:17.237157395Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:12:17.237362 env[1108]: time="2023-10-02T19:12:17.237227430Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:12:17.237492 env[1108]: time="2023-10-02T19:12:17.237462676Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:12:17.237544 env[1108]: time="2023-10-02T19:12:17.237495022Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237544 env[1108]: time="2023-10-02T19:12:17.237508108Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:12:17.237599 env[1108]: time="2023-10-02T19:12:17.237548028Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237599 env[1108]: time="2023-10-02T19:12:17.237560325Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237599 env[1108]: time="2023-10-02T19:12:17.237571832Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237599 env[1108]: time="2023-10-02T19:12:17.237583814Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237599 env[1108]: time="2023-10-02T19:12:17.237594837Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237732 env[1108]: time="2023-10-02T19:12:17.237606303Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237732 env[1108]: time="2023-10-02T19:12:17.237617885Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237732 env[1108]: time="2023-10-02T19:12:17.237628329Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237732 env[1108]: time="2023-10-02T19:12:17.237640027Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:12:17.237856 env[1108]: time="2023-10-02T19:12:17.237748046Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237856 env[1108]: time="2023-10-02T19:12:17.237762931Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237856 env[1108]: time="2023-10-02T19:12:17.237774880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.237856 env[1108]: time="2023-10-02T19:12:17.237785946Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:12:17.237856 env[1108]: time="2023-10-02T19:12:17.237800346Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:12:17.237856 env[1108]: time="2023-10-02T19:12:17.237811339Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:12:17.237856 env[1108]: time="2023-10-02T19:12:17.237828211Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:12:17.238038 env[1108]: time="2023-10-02T19:12:17.237870203Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:12:17.238106 env[1108]: time="2023-10-02T19:12:17.238046659Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:12:17.238106 env[1108]: time="2023-10-02T19:12:17.238101705Z" level=info msg="Connect containerd service" Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.238131200Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.238623867Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.238825780Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.238857925Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.238909879Z" level=info msg="containerd successfully booted in 0.043454s" Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.240006073Z" level=info msg="Start subscribing containerd event" Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.240421331Z" level=info msg="Start recovering state" Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.240506704Z" level=info msg="Start event monitor" Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.240555353Z" level=info msg="Start snapshots syncer" Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.240565946Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:12:17.241380 env[1108]: time="2023-10-02T19:12:17.240577222Z" level=info msg="Start streaming server" Oct 2 19:12:17.239034 systemd[1]: Started containerd.service. Oct 2 19:12:17.243848 tar[1105]: ./ptp Oct 2 19:12:17.284730 tar[1105]: ./vlan Oct 2 19:12:17.446614 sshd_keygen[1103]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:12:17.494643 systemd[1]: Finished sshd-keygen.service. Oct 2 19:12:17.498650 systemd[1]: Starting issuegen.service... Oct 2 19:12:17.507799 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:12:17.508021 systemd[1]: Finished issuegen.service. Oct 2 19:12:17.510874 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:12:17.512461 tar[1105]: ./host-device Oct 2 19:12:17.541359 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:12:17.543737 systemd[1]: Started getty@tty1.service. Oct 2 19:12:17.545476 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:12:17.546283 systemd[1]: Reached target getty.target. Oct 2 19:12:17.556995 locksmithd[1136]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:12:17.564380 tar[1105]: ./tuning Oct 2 19:12:17.603539 tar[1105]: ./vrf Oct 2 19:12:17.636412 tar[1105]: ./sbr Oct 2 19:12:17.725406 systemd-networkd[1007]: eth0: Gained IPv6LL Oct 2 19:12:17.728998 tar[1105]: ./tap Oct 2 19:12:17.776152 tar[1105]: ./dhcp Oct 2 19:12:17.867016 systemd[1]: Finished prepare-critools.service. Oct 2 19:12:17.880314 tar[1105]: ./static Oct 2 19:12:17.902611 tar[1105]: ./firewall Oct 2 19:12:17.938356 tar[1105]: ./macvlan Oct 2 19:12:17.971232 tar[1105]: ./dummy Oct 2 19:12:18.004092 tar[1105]: ./bridge Oct 2 19:12:18.040183 tar[1105]: ./ipvlan Oct 2 19:12:18.075276 tar[1105]: ./portmap Oct 2 19:12:18.108117 tar[1105]: ./host-local Oct 2 19:12:18.148219 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:12:18.149473 systemd[1]: Reached target multi-user.target. Oct 2 19:12:18.151345 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:12:18.157345 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:12:18.157512 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:12:18.158452 systemd[1]: Startup finished in 724ms (kernel) + 7.349s (initrd) + 6.077s (userspace) = 14.151s. Oct 2 19:12:21.068210 systemd[1]: Created slice system-sshd.slice. Oct 2 19:12:21.069631 systemd[1]: Started sshd@0-10.0.0.71:22-10.0.0.1:57284.service. Oct 2 19:12:21.121758 sshd[1164]: Accepted publickey for core from 10.0.0.1 port 57284 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:12:21.123513 sshd[1164]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:21.132489 systemd[1]: Created slice user-500.slice. Oct 2 19:12:21.133651 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:12:21.135159 systemd-logind[1096]: New session 1 of user core. Oct 2 19:12:21.141748 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:12:21.143169 systemd[1]: Starting user@500.service... Oct 2 19:12:21.145827 (systemd)[1167]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:21.220716 systemd[1167]: Queued start job for default target default.target. Oct 2 19:12:21.221360 systemd[1167]: Reached target paths.target. Oct 2 19:12:21.221389 systemd[1167]: Reached target sockets.target. Oct 2 19:12:21.221405 systemd[1167]: Reached target timers.target. Oct 2 19:12:21.221419 systemd[1167]: Reached target basic.target. Oct 2 19:12:21.221487 systemd[1167]: Reached target default.target. Oct 2 19:12:21.221521 systemd[1167]: Startup finished in 70ms. Oct 2 19:12:21.221612 systemd[1]: Started user@500.service. Oct 2 19:12:21.223069 systemd[1]: Started session-1.scope. Oct 2 19:12:21.279469 systemd[1]: Started sshd@1-10.0.0.71:22-10.0.0.1:57292.service. Oct 2 19:12:21.322808 sshd[1176]: Accepted publickey for core from 10.0.0.1 port 57292 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:12:21.324065 sshd[1176]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:21.327994 systemd-logind[1096]: New session 2 of user core. Oct 2 19:12:21.329049 systemd[1]: Started session-2.scope. Oct 2 19:12:21.388776 sshd[1176]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:21.392299 systemd[1]: sshd@1-10.0.0.71:22-10.0.0.1:57292.service: Deactivated successfully. Oct 2 19:12:21.392995 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:12:21.393646 systemd-logind[1096]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:12:21.394938 systemd[1]: Started sshd@2-10.0.0.71:22-10.0.0.1:57302.service. Oct 2 19:12:21.395771 systemd-logind[1096]: Removed session 2. Oct 2 19:12:21.438557 sshd[1182]: Accepted publickey for core from 10.0.0.1 port 57302 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:12:21.439786 sshd[1182]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:21.443806 systemd-logind[1096]: New session 3 of user core. Oct 2 19:12:21.444909 systemd[1]: Started session-3.scope. Oct 2 19:12:21.497000 sshd[1182]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:21.499917 systemd[1]: sshd@2-10.0.0.71:22-10.0.0.1:57302.service: Deactivated successfully. Oct 2 19:12:21.500449 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:12:21.500940 systemd-logind[1096]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:12:21.501779 systemd[1]: Started sshd@3-10.0.0.71:22-10.0.0.1:57316.service. Oct 2 19:12:21.502432 systemd-logind[1096]: Removed session 3. Oct 2 19:12:21.541429 sshd[1189]: Accepted publickey for core from 10.0.0.1 port 57316 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:12:21.542502 sshd[1189]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:21.545652 systemd-logind[1096]: New session 4 of user core. Oct 2 19:12:21.546595 systemd[1]: Started session-4.scope. Oct 2 19:12:21.601738 sshd[1189]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:21.605372 systemd[1]: Started sshd@4-10.0.0.71:22-10.0.0.1:57328.service. Oct 2 19:12:21.605954 systemd[1]: sshd@3-10.0.0.71:22-10.0.0.1:57316.service: Deactivated successfully. Oct 2 19:12:21.606599 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:12:21.607179 systemd-logind[1096]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:12:21.608006 systemd-logind[1096]: Removed session 4. Oct 2 19:12:21.645493 sshd[1194]: Accepted publickey for core from 10.0.0.1 port 57328 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:12:21.646687 sshd[1194]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:21.649894 systemd-logind[1096]: New session 5 of user core. Oct 2 19:12:21.650737 systemd[1]: Started session-5.scope. Oct 2 19:12:21.710924 sudo[1198]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:12:21.711089 sudo[1198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:12:21.720515 dbus-daemon[1082]: н_x\xceU: received setenforce notice (enforcing=1327680848) Oct 2 19:12:21.722770 sudo[1198]: pam_unix(sudo:session): session closed for user root Oct 2 19:12:21.725429 sshd[1194]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:21.728723 systemd[1]: sshd@4-10.0.0.71:22-10.0.0.1:57328.service: Deactivated successfully. Oct 2 19:12:21.729320 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:12:21.729923 systemd-logind[1096]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:12:21.731294 systemd[1]: Started sshd@5-10.0.0.71:22-10.0.0.1:57336.service. Oct 2 19:12:21.732261 systemd-logind[1096]: Removed session 5. Oct 2 19:12:21.774491 sshd[1202]: Accepted publickey for core from 10.0.0.1 port 57336 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:12:21.775808 sshd[1202]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:21.779768 systemd-logind[1096]: New session 6 of user core. Oct 2 19:12:21.780842 systemd[1]: Started session-6.scope. Oct 2 19:12:21.834052 sudo[1206]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:12:21.834308 sudo[1206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:12:21.836848 sudo[1206]: pam_unix(sudo:session): session closed for user root Oct 2 19:12:21.840948 sudo[1205]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:12:21.841129 sudo[1205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:12:21.848989 systemd[1]: Stopping audit-rules.service... Oct 2 19:12:21.849000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:12:21.850042 auditctl[1209]: No rules Oct 2 19:12:21.850336 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:12:21.850511 systemd[1]: Stopped audit-rules.service. Oct 2 19:12:21.850621 kernel: kauditd_printk_skb: 223 callbacks suppressed Oct 2 19:12:21.850665 kernel: audit: type=1305 audit(1696273941.849:155): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:12:21.849000 audit[1209]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc8e543fa0 a2=420 a3=0 items=0 ppid=1 pid=1209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:21.852419 systemd[1]: Starting audit-rules.service... Oct 2 19:12:21.855232 kernel: audit: type=1300 audit(1696273941.849:155): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc8e543fa0 a2=420 a3=0 items=0 ppid=1 pid=1209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:21.855314 kernel: audit: type=1327 audit(1696273941.849:155): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:12:21.849000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:12:21.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.858301 kernel: audit: type=1131 audit(1696273941.849:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.867392 augenrules[1226]: No rules Oct 2 19:12:21.867952 systemd[1]: Finished audit-rules.service. Oct 2 19:12:21.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.868695 sudo[1205]: pam_unix(sudo:session): session closed for user root Oct 2 19:12:21.870020 sshd[1202]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:21.866000 audit[1205]: USER_END pid=1205 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.872823 kernel: audit: type=1130 audit(1696273941.866:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.872869 kernel: audit: type=1106 audit(1696273941.866:158): pid=1205 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.872893 kernel: audit: type=1104 audit(1696273941.866:159): pid=1205 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.866000 audit[1205]: CRED_DISP pid=1205 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.873660 systemd[1]: Started sshd@6-10.0.0.71:22-10.0.0.1:57348.service. Oct 2 19:12:21.874197 systemd[1]: sshd@5-10.0.0.71:22-10.0.0.1:57336.service: Deactivated successfully. Oct 2 19:12:21.874789 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:12:21.874929 kernel: audit: type=1106 audit(1696273941.869:160): pid=1202 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:21.869000 audit[1202]: USER_END pid=1202 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:21.875478 systemd-logind[1096]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:12:21.876402 systemd-logind[1096]: Removed session 6. Oct 2 19:12:21.877886 kernel: audit: type=1104 audit(1696273941.869:161): pid=1202 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:21.869000 audit[1202]: CRED_DISP pid=1202 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:21.880359 kernel: audit: type=1130 audit(1696273941.872:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.71:22-10.0.0.1:57348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.71:22-10.0.0.1:57348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.71:22-10.0.0.1:57336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.913000 audit[1231]: USER_ACCT pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:21.914577 sshd[1231]: Accepted publickey for core from 10.0.0.1 port 57348 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:12:21.914000 audit[1231]: CRED_ACQ pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:21.914000 audit[1231]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd11a0d8e0 a2=3 a3=0 items=0 ppid=1 pid=1231 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:21.914000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:21.915634 sshd[1231]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:21.919004 systemd-logind[1096]: New session 7 of user core. Oct 2 19:12:21.919970 systemd[1]: Started session-7.scope. Oct 2 19:12:21.924000 audit[1231]: USER_START pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:21.925000 audit[1234]: CRED_ACQ pid=1234 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:21.972000 audit[1235]: USER_ACCT pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.972000 audit[1235]: CRED_REFR pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:21.973425 sudo[1235]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:12:21.973593 sudo[1235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:12:21.973000 audit[1235]: USER_START pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:22.508194 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:12:22.514132 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:12:22.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:22.514482 systemd[1]: Reached target network-online.target. Oct 2 19:12:22.515753 systemd[1]: Starting docker.service... Oct 2 19:12:22.556478 env[1252]: time="2023-10-02T19:12:22.556406839Z" level=info msg="Starting up" Oct 2 19:12:22.557996 env[1252]: time="2023-10-02T19:12:22.557970377Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:12:22.557996 env[1252]: time="2023-10-02T19:12:22.557986993Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:12:22.558079 env[1252]: time="2023-10-02T19:12:22.558004173Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:12:22.558079 env[1252]: time="2023-10-02T19:12:22.558013626Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:12:22.559773 env[1252]: time="2023-10-02T19:12:22.559731633Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:12:22.559773 env[1252]: time="2023-10-02T19:12:22.559752656Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:12:22.559773 env[1252]: time="2023-10-02T19:12:22.559767710Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:12:22.559910 env[1252]: time="2023-10-02T19:12:22.559780091Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:12:23.009033 env[1252]: time="2023-10-02T19:12:23.008046537Z" level=info msg="Loading containers: start." Oct 2 19:12:23.064000 audit[1285]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.064000 audit[1285]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffffdcfae40 a2=0 a3=7ffffdcfae2c items=0 ppid=1252 pid=1285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.064000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:12:23.067000 audit[1287]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.067000 audit[1287]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdb26c88f0 a2=0 a3=7ffdb26c88dc items=0 ppid=1252 pid=1287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.067000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:12:23.069000 audit[1289]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.069000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffda812a660 a2=0 a3=7ffda812a64c items=0 ppid=1252 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.069000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:12:23.071000 audit[1291]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.071000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffbeeb2560 a2=0 a3=7fffbeeb254c items=0 ppid=1252 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.071000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:12:23.073000 audit[1293]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.073000 audit[1293]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd2903bc90 a2=0 a3=7ffd2903bc7c items=0 ppid=1252 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.073000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:12:23.093000 audit[1298]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.093000 audit[1298]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff4e1fb9b0 a2=0 a3=7fff4e1fb99c items=0 ppid=1252 pid=1298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.093000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:12:23.511000 audit[1300]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.511000 audit[1300]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff44148980 a2=0 a3=7fff4414896c items=0 ppid=1252 pid=1300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.511000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:12:23.513000 audit[1302]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.513000 audit[1302]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc564c71a0 a2=0 a3=7ffc564c718c items=0 ppid=1252 pid=1302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.513000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:12:23.516000 audit[1304]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.516000 audit[1304]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff86f2b8c0 a2=0 a3=7fff86f2b8ac items=0 ppid=1252 pid=1304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.516000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:12:23.526000 audit[1308]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.526000 audit[1308]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd65fc7ad0 a2=0 a3=7ffd65fc7abc items=0 ppid=1252 pid=1308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.526000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:12:23.528000 audit[1309]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.528000 audit[1309]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe51efb580 a2=0 a3=7ffe51efb56c items=0 ppid=1252 pid=1309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.528000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:12:23.538269 kernel: Initializing XFRM netlink socket Oct 2 19:12:23.573155 env[1252]: time="2023-10-02T19:12:23.573102856Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:12:23.596000 audit[1317]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.596000 audit[1317]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe2ea1a590 a2=0 a3=7ffe2ea1a57c items=0 ppid=1252 pid=1317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.596000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:12:23.614000 audit[1320]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.614000 audit[1320]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc353c00f0 a2=0 a3=7ffc353c00dc items=0 ppid=1252 pid=1320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.614000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:12:23.618000 audit[1323]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.618000 audit[1323]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd35868f90 a2=0 a3=7ffd35868f7c items=0 ppid=1252 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.618000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:12:23.620000 audit[1325]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.620000 audit[1325]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff01b3f110 a2=0 a3=7fff01b3f0fc items=0 ppid=1252 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.620000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:12:23.622000 audit[1327]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.622000 audit[1327]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe9efcb4f0 a2=0 a3=7ffe9efcb4dc items=0 ppid=1252 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.622000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:12:23.626000 audit[1329]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.626000 audit[1329]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc626c79d0 a2=0 a3=7ffc626c79bc items=0 ppid=1252 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.626000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:12:23.628000 audit[1331]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.628000 audit[1331]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe415deb90 a2=0 a3=7ffe415deb7c items=0 ppid=1252 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.628000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:12:23.637000 audit[1334]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.637000 audit[1334]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd596bdb20 a2=0 a3=7ffd596bdb0c items=0 ppid=1252 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.637000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:12:23.639000 audit[1336]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.639000 audit[1336]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff990128c0 a2=0 a3=7fff990128ac items=0 ppid=1252 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.639000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:12:23.642000 audit[1338]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.642000 audit[1338]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd9259fe30 a2=0 a3=7ffd9259fe1c items=0 ppid=1252 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.642000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:12:23.644000 audit[1340]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.644000 audit[1340]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcfc84a2a0 a2=0 a3=7ffcfc84a28c items=0 ppid=1252 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.644000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:12:23.646602 systemd-networkd[1007]: docker0: Link UP Oct 2 19:12:23.656000 audit[1344]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.656000 audit[1344]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe448da940 a2=0 a3=7ffe448da92c items=0 ppid=1252 pid=1344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.656000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:12:23.657000 audit[1345]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:23.657000 audit[1345]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd38ff2530 a2=0 a3=7ffd38ff251c items=0 ppid=1252 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:23.657000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:12:23.659322 env[1252]: time="2023-10-02T19:12:23.659275716Z" level=info msg="Loading containers: done." Oct 2 19:12:23.668641 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1747526887-merged.mount: Deactivated successfully. Oct 2 19:12:23.674179 env[1252]: time="2023-10-02T19:12:23.674111964Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:12:23.674395 env[1252]: time="2023-10-02T19:12:23.674366018Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:12:23.674549 env[1252]: time="2023-10-02T19:12:23.674519656Z" level=info msg="Daemon has completed initialization" Oct 2 19:12:23.695863 systemd[1]: Started docker.service. Oct 2 19:12:23.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:23.703864 env[1252]: time="2023-10-02T19:12:23.703781653Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:12:23.727941 systemd[1]: Reloading. Oct 2 19:12:23.795289 /usr/lib/systemd/system-generators/torcx-generator[1395]: time="2023-10-02T19:12:23Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:12:23.795329 /usr/lib/systemd/system-generators/torcx-generator[1395]: time="2023-10-02T19:12:23Z" level=info msg="torcx already run" Oct 2 19:12:23.864145 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:12:23.864163 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:12:23.882656 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:12:23.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit: BPF prog-id=31 op=LOAD Oct 2 19:12:23.941000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit: BPF prog-id=32 op=LOAD Oct 2 19:12:23.942000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit: BPF prog-id=33 op=LOAD Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit: BPF prog-id=34 op=LOAD Oct 2 19:12:23.942000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:12:23.942000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.942000 audit: BPF prog-id=35 op=LOAD Oct 2 19:12:23.942000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit: BPF prog-id=36 op=LOAD Oct 2 19:12:23.943000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit: BPF prog-id=37 op=LOAD Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.943000 audit: BPF prog-id=38 op=LOAD Oct 2 19:12:23.943000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:12:23.943000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.945000 audit: BPF prog-id=39 op=LOAD Oct 2 19:12:23.945000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit: BPF prog-id=40 op=LOAD Oct 2 19:12:23.946000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit: BPF prog-id=41 op=LOAD Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.946000 audit: BPF prog-id=42 op=LOAD Oct 2 19:12:23.946000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:12:23.946000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:12:23.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.949000 audit: BPF prog-id=43 op=LOAD Oct 2 19:12:23.949000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit: BPF prog-id=44 op=LOAD Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:23.950000 audit: BPF prog-id=45 op=LOAD Oct 2 19:12:23.950000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:12:23.950000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:12:23.957504 systemd[1]: Started kubelet.service. Oct 2 19:12:23.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:24.012112 kubelet[1435]: E1002 19:12:24.012046 1435 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:12:24.013895 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:12:24.014012 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:12:24.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:12:24.517827 env[1108]: time="2023-10-02T19:12:24.517775154Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:12:25.701883 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3159846637.mount: Deactivated successfully. Oct 2 19:12:28.909086 env[1108]: time="2023-10-02T19:12:28.909019594Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:28.926793 env[1108]: time="2023-10-02T19:12:28.926744862Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:28.931245 env[1108]: time="2023-10-02T19:12:28.931190717Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:28.953044 env[1108]: time="2023-10-02T19:12:28.952703977Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:28.954115 env[1108]: time="2023-10-02T19:12:28.954071531Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 19:12:28.964103 env[1108]: time="2023-10-02T19:12:28.964053696Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:12:31.454001 env[1108]: time="2023-10-02T19:12:31.453923760Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:31.456204 env[1108]: time="2023-10-02T19:12:31.456155182Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:31.457967 env[1108]: time="2023-10-02T19:12:31.457934124Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:31.459864 env[1108]: time="2023-10-02T19:12:31.459839952Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:31.461530 env[1108]: time="2023-10-02T19:12:31.461484174Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 19:12:31.475511 env[1108]: time="2023-10-02T19:12:31.475461810Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:12:34.000088 env[1108]: time="2023-10-02T19:12:33.999989223Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:34.003285 env[1108]: time="2023-10-02T19:12:34.003233460Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:34.007575 env[1108]: time="2023-10-02T19:12:34.007503668Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:34.009609 env[1108]: time="2023-10-02T19:12:34.009523653Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:34.010252 env[1108]: time="2023-10-02T19:12:34.010201425Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 19:12:34.034012 env[1108]: time="2023-10-02T19:12:34.033907216Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:12:34.183679 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:12:34.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:34.183873 systemd[1]: Stopped kubelet.service. Oct 2 19:12:34.184749 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:12:34.184806 kernel: audit: type=1130 audit(1696273954.182:372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:34.185965 systemd[1]: Started kubelet.service. Oct 2 19:12:34.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:34.190599 kernel: audit: type=1131 audit(1696273954.182:373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:34.190711 kernel: audit: type=1130 audit(1696273954.185:374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:34.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:34.253831 kubelet[1480]: E1002 19:12:34.253191 1480 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:12:34.257647 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:12:34.257919 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:12:34.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:12:34.261248 kernel: audit: type=1131 audit(1696273954.256:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:12:35.096406 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1935028475.mount: Deactivated successfully. Oct 2 19:12:36.576465 env[1108]: time="2023-10-02T19:12:36.576395197Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:36.580062 env[1108]: time="2023-10-02T19:12:36.580011065Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:36.581481 env[1108]: time="2023-10-02T19:12:36.581448977Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:36.583525 env[1108]: time="2023-10-02T19:12:36.583496454Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:36.583891 env[1108]: time="2023-10-02T19:12:36.583841436Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 19:12:36.596058 env[1108]: time="2023-10-02T19:12:36.596016769Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:12:38.270826 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1343599978.mount: Deactivated successfully. Oct 2 19:12:38.278765 env[1108]: time="2023-10-02T19:12:38.278697596Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:38.281263 env[1108]: time="2023-10-02T19:12:38.281225803Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:38.283632 env[1108]: time="2023-10-02T19:12:38.283587869Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:38.285115 env[1108]: time="2023-10-02T19:12:38.285079705Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:38.285553 env[1108]: time="2023-10-02T19:12:38.285523423Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:12:38.303959 env[1108]: time="2023-10-02T19:12:38.303896486Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:12:39.156671 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1037080972.mount: Deactivated successfully. Oct 2 19:12:44.433286 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:12:44.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:44.433472 systemd[1]: Stopped kubelet.service. Oct 2 19:12:44.435056 systemd[1]: Started kubelet.service. Oct 2 19:12:44.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:44.437412 kernel: audit: type=1130 audit(1696273964.432:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:44.437449 kernel: audit: type=1131 audit(1696273964.432:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:44.437471 kernel: audit: type=1130 audit(1696273964.433:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:44.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:44.476087 kubelet[1499]: E1002 19:12:44.476028 1499 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:12:44.478083 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:12:44.478241 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:12:44.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:12:44.507240 kernel: audit: type=1131 audit(1696273964.477:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:12:45.744399 env[1108]: time="2023-10-02T19:12:45.744329840Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:45.798438 env[1108]: time="2023-10-02T19:12:45.798384595Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:45.831331 env[1108]: time="2023-10-02T19:12:45.831292451Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:45.870273 env[1108]: time="2023-10-02T19:12:45.870143556Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:45.870776 env[1108]: time="2023-10-02T19:12:45.870732137Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:12:45.879872 env[1108]: time="2023-10-02T19:12:45.879605901Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:12:46.453285 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount502714747.mount: Deactivated successfully. Oct 2 19:12:47.143864 env[1108]: time="2023-10-02T19:12:47.143784783Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:47.146165 env[1108]: time="2023-10-02T19:12:47.146122838Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:47.149964 env[1108]: time="2023-10-02T19:12:47.149920542Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:47.150584 env[1108]: time="2023-10-02T19:12:47.150539604Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:12:47.151266 env[1108]: time="2023-10-02T19:12:47.151243863Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:49.244401 systemd[1]: Stopped kubelet.service. Oct 2 19:12:49.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:49.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:49.248939 kernel: audit: type=1130 audit(1696273969.243:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:49.249091 kernel: audit: type=1131 audit(1696273969.243:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:49.263742 systemd[1]: Reloading. Oct 2 19:12:49.334475 /usr/lib/systemd/system-generators/torcx-generator[1608]: time="2023-10-02T19:12:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:12:49.334862 /usr/lib/systemd/system-generators/torcx-generator[1608]: time="2023-10-02T19:12:49Z" level=info msg="torcx already run" Oct 2 19:12:49.397353 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:12:49.397371 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:12:49.414024 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:12:49.488887 kernel: audit: type=1400 audit(1696273969.477:382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.489095 kernel: audit: type=1400 audit(1696273969.477:383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.489137 kernel: audit: type=1400 audit(1696273969.477:384): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.489157 kernel: audit: type=1400 audit(1696273969.477:385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.489173 kernel: audit: type=1400 audit(1696273969.477:386): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.493732 kernel: audit: type=1400 audit(1696273969.477:387): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.493822 kernel: audit: type=1400 audit(1696273969.477:388): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.493857 kernel: audit: type=1400 audit(1696273969.477:389): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.493885 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:12:49.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.495837 kernel: audit: type=1400 audit(1696273969.477:390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.481000 audit: BPF prog-id=46 op=LOAD Oct 2 19:12:49.481000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:12:49.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.485000 audit: BPF prog-id=47 op=LOAD Oct 2 19:12:49.485000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:12:49.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit: BPF prog-id=48 op=LOAD Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.487000 audit: BPF prog-id=49 op=LOAD Oct 2 19:12:49.487000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:12:49.487000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit: BPF prog-id=50 op=LOAD Oct 2 19:12:49.488000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.492000 audit: BPF prog-id=51 op=LOAD Oct 2 19:12:49.492000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:12:49.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.498000 audit: BPF prog-id=54 op=LOAD Oct 2 19:12:49.498000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit: BPF prog-id=55 op=LOAD Oct 2 19:12:49.499000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit: BPF prog-id=56 op=LOAD Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.499000 audit: BPF prog-id=57 op=LOAD Oct 2 19:12:49.499000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:12:49.500000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.502000 audit: BPF prog-id=58 op=LOAD Oct 2 19:12:49.502000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:12:49.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit: BPF prog-id=59 op=LOAD Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:49.504000 audit: BPF prog-id=60 op=LOAD Oct 2 19:12:49.504000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:12:49.504000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:12:49.517178 systemd[1]: Started kubelet.service. Oct 2 19:12:49.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:49.580761 kubelet[1648]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:12:49.580761 kubelet[1648]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:12:49.580761 kubelet[1648]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:12:49.581157 kubelet[1648]: I1002 19:12:49.580792 1648 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:12:49.957811 kubelet[1648]: I1002 19:12:49.957763 1648 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:12:49.957811 kubelet[1648]: I1002 19:12:49.957797 1648 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:12:49.958140 kubelet[1648]: I1002 19:12:49.958032 1648 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:12:49.961286 kubelet[1648]: I1002 19:12:49.961235 1648 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:12:49.962240 kubelet[1648]: E1002 19:12:49.962201 1648 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.71:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:49.965884 kubelet[1648]: I1002 19:12:49.965839 1648 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:12:49.966228 kubelet[1648]: I1002 19:12:49.966175 1648 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:12:50.004770 kubelet[1648]: I1002 19:12:50.004690 1648 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:12:50.004770 kubelet[1648]: I1002 19:12:50.004757 1648 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:12:50.004770 kubelet[1648]: I1002 19:12:50.004773 1648 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:12:50.005116 kubelet[1648]: I1002 19:12:50.004948 1648 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:12:50.009254 kubelet[1648]: I1002 19:12:50.009204 1648 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:12:50.009254 kubelet[1648]: I1002 19:12:50.009246 1648 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:12:50.009448 kubelet[1648]: I1002 19:12:50.009280 1648 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:12:50.009448 kubelet[1648]: I1002 19:12:50.009300 1648 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:12:50.009828 kubelet[1648]: W1002 19:12:50.009774 1648 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.71:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:50.009879 kubelet[1648]: E1002 19:12:50.009844 1648 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.71:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:50.009977 kubelet[1648]: I1002 19:12:50.009934 1648 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:12:50.010165 kubelet[1648]: W1002 19:12:50.010119 1648 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.71:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:50.010227 kubelet[1648]: E1002 19:12:50.010167 1648 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.71:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:50.010299 kubelet[1648]: W1002 19:12:50.010278 1648 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:12:50.010676 kubelet[1648]: I1002 19:12:50.010657 1648 server.go:1168] "Started kubelet" Oct 2 19:12:50.011072 kubelet[1648]: I1002 19:12:50.011053 1648 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:12:50.011165 kubelet[1648]: I1002 19:12:50.011145 1648 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:12:50.011671 kubelet[1648]: E1002 19:12:50.011576 1648 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a60304039bea4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 12, 50, 10635940, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 12, 50, 10635940, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.71:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.71:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:12:50.012183 kubelet[1648]: I1002 19:12:50.011990 1648 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:12:50.012000 audit[1648]: AVC avc: denied { mac_admin } for pid=1648 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:50.012000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:12:50.012000 audit[1648]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00087e270 a1=c000a12240 a2=c00087e240 a3=25 items=0 ppid=1 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.012000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:12:50.013574 kubelet[1648]: E1002 19:12:50.013389 1648 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:12:50.013574 kubelet[1648]: E1002 19:12:50.013416 1648 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:12:50.012000 audit[1648]: AVC avc: denied { mac_admin } for pid=1648 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:50.012000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:12:50.012000 audit[1648]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00093f320 a1=c000a12258 a2=c00087e300 a3=25 items=0 ppid=1 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.012000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:12:50.013850 kubelet[1648]: I1002 19:12:50.013620 1648 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:12:50.013850 kubelet[1648]: I1002 19:12:50.013664 1648 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:12:50.013850 kubelet[1648]: I1002 19:12:50.013729 1648 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:12:50.013965 kubelet[1648]: I1002 19:12:50.013863 1648 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:12:50.013965 kubelet[1648]: I1002 19:12:50.013936 1648 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:12:50.014895 kubelet[1648]: E1002 19:12:50.014458 1648 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.71:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.71:6443: connect: connection refused" interval="200ms" Oct 2 19:12:50.014895 kubelet[1648]: W1002 19:12:50.014539 1648 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.71:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:50.014895 kubelet[1648]: E1002 19:12:50.014588 1648 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.71:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:50.016000 audit[1660]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1660 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:50.016000 audit[1660]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffc7e31a90 a2=0 a3=7fffc7e31a7c items=0 ppid=1648 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.016000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:12:50.017000 audit[1661]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1661 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:50.017000 audit[1661]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc492eb800 a2=0 a3=7ffc492eb7ec items=0 ppid=1648 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.017000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:12:50.019000 audit[1663]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1663 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:50.019000 audit[1663]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd1593e560 a2=0 a3=7ffd1593e54c items=0 ppid=1648 pid=1663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.019000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:12:50.021000 audit[1665]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1665 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:50.021000 audit[1665]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe4f954420 a2=0 a3=7ffe4f95440c items=0 ppid=1648 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.021000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:12:50.026000 audit[1668]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1668 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:50.026000 audit[1668]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff84405a20 a2=0 a3=7fff84405a0c items=0 ppid=1648 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.026000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:12:50.027953 kubelet[1648]: I1002 19:12:50.027913 1648 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:12:50.027000 audit[1669]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1669 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:50.027000 audit[1669]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc857bc7f0 a2=0 a3=7ffc857bc7dc items=0 ppid=1648 pid=1669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.027000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:12:50.028922 kubelet[1648]: I1002 19:12:50.028805 1648 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:12:50.028922 kubelet[1648]: I1002 19:12:50.028833 1648 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:12:50.028922 kubelet[1648]: I1002 19:12:50.028853 1648 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:12:50.028922 kubelet[1648]: E1002 19:12:50.028897 1648 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:12:50.028000 audit[1671]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1671 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:50.028000 audit[1671]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc72fd3c50 a2=0 a3=7ffc72fd3c3c items=0 ppid=1648 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.028000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:12:50.030000 audit[1672]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1672 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:50.030000 audit[1672]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed62ca4a0 a2=0 a3=7ffed62ca48c items=0 ppid=1648 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.030000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:12:50.031000 audit[1674]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1674 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:50.031000 audit[1674]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc3d5fd530 a2=0 a3=7ffc3d5fd51c items=0 ppid=1648 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.031000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:12:50.032996 kubelet[1648]: W1002 19:12:50.032918 1648 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.71:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:50.033080 kubelet[1648]: E1002 19:12:50.033011 1648 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.71:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:50.032000 audit[1676]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1676 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:50.032000 audit[1676]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc0e709b60 a2=0 a3=7ffc0e709b4c items=0 ppid=1648 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.032000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:12:50.032000 audit[1677]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:50.032000 audit[1677]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcfb974600 a2=0 a3=7ffcfb9745ec items=0 ppid=1648 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.032000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:12:50.033000 audit[1681]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1681 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:50.033000 audit[1681]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffd14e68a0 a2=0 a3=7fffd14e688c items=0 ppid=1648 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.033000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:12:50.036859 kubelet[1648]: I1002 19:12:50.036831 1648 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:12:50.036859 kubelet[1648]: I1002 19:12:50.036861 1648 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:12:50.036944 kubelet[1648]: I1002 19:12:50.036874 1648 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:12:50.064012 kubelet[1648]: I1002 19:12:50.063955 1648 policy_none.go:49] "None policy: Start" Oct 2 19:12:50.064768 kubelet[1648]: I1002 19:12:50.064733 1648 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:12:50.064825 kubelet[1648]: I1002 19:12:50.064784 1648 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:12:50.070912 systemd[1]: Created slice kubepods.slice. Oct 2 19:12:50.074352 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:12:50.076533 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:12:50.087341 kubelet[1648]: I1002 19:12:50.087298 1648 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:12:50.086000 audit[1648]: AVC avc: denied { mac_admin } for pid=1648 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:50.086000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:12:50.086000 audit[1648]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ce2450 a1=c000cbee58 a2=c000ce2420 a3=25 items=0 ppid=1 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.086000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:12:50.087716 kubelet[1648]: I1002 19:12:50.087423 1648 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:12:50.087819 kubelet[1648]: I1002 19:12:50.087786 1648 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:12:50.088532 kubelet[1648]: E1002 19:12:50.088499 1648 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:12:50.115196 kubelet[1648]: I1002 19:12:50.115154 1648 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:12:50.115676 kubelet[1648]: E1002 19:12:50.115653 1648 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.71:6443/api/v1/nodes\": dial tcp 10.0.0.71:6443: connect: connection refused" node="localhost" Oct 2 19:12:50.129864 kubelet[1648]: I1002 19:12:50.129814 1648 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:12:50.131256 kubelet[1648]: I1002 19:12:50.131230 1648 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:12:50.132585 kubelet[1648]: I1002 19:12:50.132556 1648 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:12:50.137807 systemd[1]: Created slice kubepods-burstable-pod24fef87020af50fba838138f9686fc61.slice. Oct 2 19:12:50.146153 systemd[1]: Created slice kubepods-burstable-pod6b05603258166ee8ac644314736ab2e4.slice. Oct 2 19:12:50.156180 systemd[1]: Created slice kubepods-burstable-pod80b8b8966aa7d1c422f3be2bfac9c13f.slice. Oct 2 19:12:50.215866 kubelet[1648]: I1002 19:12:50.215091 1648 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:12:50.215866 kubelet[1648]: E1002 19:12:50.215343 1648 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.71:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.71:6443: connect: connection refused" interval="400ms" Oct 2 19:12:50.315978 kubelet[1648]: I1002 19:12:50.315909 1648 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:50.315978 kubelet[1648]: I1002 19:12:50.315964 1648 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:50.315978 kubelet[1648]: I1002 19:12:50.315990 1648 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6b05603258166ee8ac644314736ab2e4-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"6b05603258166ee8ac644314736ab2e4\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:50.316263 kubelet[1648]: I1002 19:12:50.316012 1648 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6b05603258166ee8ac644314736ab2e4-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"6b05603258166ee8ac644314736ab2e4\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:50.316263 kubelet[1648]: I1002 19:12:50.316035 1648 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6b05603258166ee8ac644314736ab2e4-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"6b05603258166ee8ac644314736ab2e4\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:50.316263 kubelet[1648]: I1002 19:12:50.316083 1648 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:50.316263 kubelet[1648]: I1002 19:12:50.316192 1648 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:50.316413 kubelet[1648]: I1002 19:12:50.316289 1648 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:50.317162 kubelet[1648]: I1002 19:12:50.317141 1648 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:12:50.317600 kubelet[1648]: E1002 19:12:50.317580 1648 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.71:6443/api/v1/nodes\": dial tcp 10.0.0.71:6443: connect: connection refused" node="localhost" Oct 2 19:12:50.444522 kubelet[1648]: E1002 19:12:50.444481 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:50.445373 env[1108]: time="2023-10-02T19:12:50.445311410Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,}" Oct 2 19:12:50.454760 kubelet[1648]: E1002 19:12:50.454715 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:50.455325 env[1108]: time="2023-10-02T19:12:50.455283990Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:6b05603258166ee8ac644314736ab2e4,Namespace:kube-system,Attempt:0,}" Oct 2 19:12:50.458590 kubelet[1648]: E1002 19:12:50.458562 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:50.459050 env[1108]: time="2023-10-02T19:12:50.459004797Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,}" Oct 2 19:12:50.616438 kubelet[1648]: E1002 19:12:50.616319 1648 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.71:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.71:6443: connect: connection refused" interval="800ms" Oct 2 19:12:50.719088 kubelet[1648]: I1002 19:12:50.719053 1648 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:12:50.719453 kubelet[1648]: E1002 19:12:50.719433 1648 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.71:6443/api/v1/nodes\": dial tcp 10.0.0.71:6443: connect: connection refused" node="localhost" Oct 2 19:12:50.940963 kubelet[1648]: W1002 19:12:50.940862 1648 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.71:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:50.940963 kubelet[1648]: E1002 19:12:50.940966 1648 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.71:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:51.070601 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3582520138.mount: Deactivated successfully. Oct 2 19:12:51.077268 env[1108]: time="2023-10-02T19:12:51.077176029Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.080569 env[1108]: time="2023-10-02T19:12:51.080490546Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.081809 env[1108]: time="2023-10-02T19:12:51.081754673Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.083104 env[1108]: time="2023-10-02T19:12:51.083031768Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.085967 env[1108]: time="2023-10-02T19:12:51.085906359Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.087660 env[1108]: time="2023-10-02T19:12:51.087622266Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.089196 env[1108]: time="2023-10-02T19:12:51.089139569Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.091943 env[1108]: time="2023-10-02T19:12:51.091907550Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.096044 env[1108]: time="2023-10-02T19:12:51.095975592Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.097689 env[1108]: time="2023-10-02T19:12:51.097660350Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.098391 env[1108]: time="2023-10-02T19:12:51.098357583Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.099075 env[1108]: time="2023-10-02T19:12:51.099027938Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:51.209266 kubelet[1648]: W1002 19:12:51.209056 1648 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.71:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:51.209266 kubelet[1648]: E1002 19:12:51.209136 1648 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.71:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:51.245879 kubelet[1648]: W1002 19:12:51.245795 1648 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.71:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:51.245879 kubelet[1648]: E1002 19:12:51.245895 1648 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.71:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:51.416850 kubelet[1648]: E1002 19:12:51.416794 1648 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.71:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.71:6443: connect: connection refused" interval="1.6s" Oct 2 19:12:51.521056 kubelet[1648]: I1002 19:12:51.520939 1648 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:12:51.521432 kubelet[1648]: E1002 19:12:51.521413 1648 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.71:6443/api/v1/nodes\": dial tcp 10.0.0.71:6443: connect: connection refused" node="localhost" Oct 2 19:12:51.572270 env[1108]: time="2023-10-02T19:12:51.572184407Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:51.572270 env[1108]: time="2023-10-02T19:12:51.572243669Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:51.573079 env[1108]: time="2023-10-02T19:12:51.572262193Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:51.573079 env[1108]: time="2023-10-02T19:12:51.572431214Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fce637d56e73a8a3725a416597874276010708105658a862f25e968571a6f850 pid=1704 runtime=io.containerd.runc.v2 Oct 2 19:12:51.573397 env[1108]: time="2023-10-02T19:12:51.573246167Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:51.573397 env[1108]: time="2023-10-02T19:12:51.573280458Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:51.573397 env[1108]: time="2023-10-02T19:12:51.573292462Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:51.573518 env[1108]: time="2023-10-02T19:12:51.573428537Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cbe8eb00da082e3dc51db8d2cd0388c8f36814542aaa6c94f496dcc01d15401f pid=1705 runtime=io.containerd.runc.v2 Oct 2 19:12:51.574162 env[1108]: time="2023-10-02T19:12:51.574100326Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:51.574235 env[1108]: time="2023-10-02T19:12:51.574157762Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:51.574235 env[1108]: time="2023-10-02T19:12:51.574177018Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:51.574386 env[1108]: time="2023-10-02T19:12:51.574319181Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/72a47c6619091320b469814cd4e6f30e7c012c7996c2df260d0f7e2274a19d9d pid=1711 runtime=io.containerd.runc.v2 Oct 2 19:12:51.588035 systemd[1]: Started cri-containerd-72a47c6619091320b469814cd4e6f30e7c012c7996c2df260d0f7e2274a19d9d.scope. Oct 2 19:12:51.588950 systemd[1]: Started cri-containerd-cbe8eb00da082e3dc51db8d2cd0388c8f36814542aaa6c94f496dcc01d15401f.scope. Oct 2 19:12:51.591889 systemd[1]: Started cri-containerd-fce637d56e73a8a3725a416597874276010708105658a862f25e968571a6f850.scope. Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit: BPF prog-id=61 op=LOAD Oct 2 19:12:51.602000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.602000 audit[1738]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00018dc48 a2=10 a3=1c items=0 ppid=1711 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613437633636313930393133323062343639383134636434653666 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.603000 audit: BPF prog-id=62 op=LOAD Oct 2 19:12:51.603000 audit[1738]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00018d6b0 a2=3c a3=c items=0 ppid=1711 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613437633636313930393133323062343639383134636434653666 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1705 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362653865623030646130383265336463353164623864326364303338 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1705 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362653865623030646130383265336463353164623864326364303338 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit: BPF prog-id=63 op=LOAD Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00018d9d8 a2=78 a3=c000286b60 items=0 ppid=1711 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613437633636313930393133323062343639383134636434653666 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { perfmon } for pid=1738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit: BPF prog-id=64 op=LOAD Oct 2 19:12:51.604000 audit[1734]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00029ea60 items=0 ppid=1705 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362653865623030646130383265336463353164623864326364303338 Oct 2 19:12:51.604000 audit[1738]: AVC avc: denied { bpf } for pid=1738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit: BPF prog-id=65 op=LOAD Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1738]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00018d770 a2=78 a3=c000286ba8 items=0 ppid=1711 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613437633636313930393133323062343639383134636434653666 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { perfmon } for pid=1734 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:12:51.604000 audit[1734]: AVC avc: denied { bpf } for pid=1734 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.604000 audit: BPF prog-id=66 op=LOAD Oct 2 19:12:51.604000 audit[1734]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00029eaa8 items=0 ppid=1705 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362653865623030646130383265336463353164623864326364303338 Oct 2 19:12:51.604000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit: BPF prog-id=69 op=LOAD Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1704 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653633376435366537336138613337323561343136353937383734 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1704 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653633376435366537336138613337323561343136353937383734 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.605000 audit: BPF prog-id=70 op=LOAD Oct 2 19:12:51.605000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030b1a0 items=0 ppid=1704 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653633376435366537336138613337323561343136353937383734 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit: BPF prog-id=71 op=LOAD Oct 2 19:12:51.606000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030b1e8 items=0 ppid=1704 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653633376435366537336138613337323561343136353937383734 Oct 2 19:12:51.606000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:12:51.606000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { perfmon } for pid=1732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit[1732]: AVC avc: denied { bpf } for pid=1732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.606000 audit: BPF prog-id=72 op=LOAD Oct 2 19:12:51.606000 audit[1732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030b5f8 items=0 ppid=1704 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663653633376435366537336138613337323561343136353937383734 Oct 2 19:12:51.609723 kubelet[1648]: W1002 19:12:51.606099 1648 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.71:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:51.609723 kubelet[1648]: E1002 19:12:51.606163 1648 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.71:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.71:6443: connect: connection refused Oct 2 19:12:51.633309 env[1108]: time="2023-10-02T19:12:51.633261739Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:6b05603258166ee8ac644314736ab2e4,Namespace:kube-system,Attempt:0,} returns sandbox id \"fce637d56e73a8a3725a416597874276010708105658a862f25e968571a6f850\"" Oct 2 19:12:51.634775 kubelet[1648]: E1002 19:12:51.634752 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:51.637718 env[1108]: time="2023-10-02T19:12:51.637677550Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,} returns sandbox id \"cbe8eb00da082e3dc51db8d2cd0388c8f36814542aaa6c94f496dcc01d15401f\"" Oct 2 19:12:51.637812 env[1108]: time="2023-10-02T19:12:51.637766719Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,} returns sandbox id \"72a47c6619091320b469814cd4e6f30e7c012c7996c2df260d0f7e2274a19d9d\"" Oct 2 19:12:51.638431 kubelet[1648]: E1002 19:12:51.638279 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:51.638431 kubelet[1648]: E1002 19:12:51.638333 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:51.638629 env[1108]: time="2023-10-02T19:12:51.638584181Z" level=info msg="CreateContainer within sandbox \"fce637d56e73a8a3725a416597874276010708105658a862f25e968571a6f850\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:12:51.640018 env[1108]: time="2023-10-02T19:12:51.639990191Z" level=info msg="CreateContainer within sandbox \"72a47c6619091320b469814cd4e6f30e7c012c7996c2df260d0f7e2274a19d9d\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:12:51.640344 env[1108]: time="2023-10-02T19:12:51.640318142Z" level=info msg="CreateContainer within sandbox \"cbe8eb00da082e3dc51db8d2cd0388c8f36814542aaa6c94f496dcc01d15401f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:12:51.858008 env[1108]: time="2023-10-02T19:12:51.857778624Z" level=info msg="CreateContainer within sandbox \"72a47c6619091320b469814cd4e6f30e7c012c7996c2df260d0f7e2274a19d9d\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"64702a74a8c5568a861ae13929f0fe8fb299658d73e452e258f6710dca08a3eb\"" Oct 2 19:12:51.858750 env[1108]: time="2023-10-02T19:12:51.858716745Z" level=info msg="StartContainer for \"64702a74a8c5568a861ae13929f0fe8fb299658d73e452e258f6710dca08a3eb\"" Oct 2 19:12:51.861430 env[1108]: time="2023-10-02T19:12:51.861373072Z" level=info msg="CreateContainer within sandbox \"fce637d56e73a8a3725a416597874276010708105658a862f25e968571a6f850\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"c79ca75b33264c18cab1ab48559a9595e03aa437f0209f22e306d4a644c995f9\"" Oct 2 19:12:51.862184 env[1108]: time="2023-10-02T19:12:51.862146807Z" level=info msg="StartContainer for \"c79ca75b33264c18cab1ab48559a9595e03aa437f0209f22e306d4a644c995f9\"" Oct 2 19:12:51.874033 systemd[1]: Started cri-containerd-64702a74a8c5568a861ae13929f0fe8fb299658d73e452e258f6710dca08a3eb.scope. Oct 2 19:12:51.875192 env[1108]: time="2023-10-02T19:12:51.875127378Z" level=info msg="CreateContainer within sandbox \"cbe8eb00da082e3dc51db8d2cd0388c8f36814542aaa6c94f496dcc01d15401f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"f0379bdb137e50ca6414d35e5632218260ed0930f1929bad49f08bf1b9223a73\"" Oct 2 19:12:51.875909 env[1108]: time="2023-10-02T19:12:51.875888616Z" level=info msg="StartContainer for \"f0379bdb137e50ca6414d35e5632218260ed0930f1929bad49f08bf1b9223a73\"" Oct 2 19:12:51.880191 systemd[1]: Started cri-containerd-c79ca75b33264c18cab1ab48559a9595e03aa437f0209f22e306d4a644c995f9.scope. Oct 2 19:12:51.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit: BPF prog-id=73 op=LOAD Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1711 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373032613734613863353536386138363161653133393239663066 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1711 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373032613734613863353536386138363161653133393239663066 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit: BPF prog-id=74 op=LOAD Oct 2 19:12:51.886000 audit[1820]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003d4630 items=0 ppid=1711 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373032613734613863353536386138363161653133393239663066 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit: BPF prog-id=75 op=LOAD Oct 2 19:12:51.886000 audit[1820]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003d4678 items=0 ppid=1711 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373032613734613863353536386138363161653133393239663066 Oct 2 19:12:51.886000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:12:51.886000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.886000 audit: BPF prog-id=76 op=LOAD Oct 2 19:12:51.886000 audit[1820]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003d4a88 items=0 ppid=1711 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373032613734613863353536386138363161653133393239663066 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.895000 audit: BPF prog-id=77 op=LOAD Oct 2 19:12:51.896000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.896000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1704 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337396361373562333332363463313863616231616234383535396139 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1704 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337396361373562333332363463313863616231616234383535396139 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.897000 audit: BPF prog-id=78 op=LOAD Oct 2 19:12:51.897000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028ae80 items=0 ppid=1704 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337396361373562333332363463313863616231616234383535396139 Oct 2 19:12:51.898000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.898000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.898000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.898000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.898000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.898000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.898000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.898000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.898000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.898000 audit: BPF prog-id=79 op=LOAD Oct 2 19:12:51.903545 systemd[1]: Started cri-containerd-f0379bdb137e50ca6414d35e5632218260ed0930f1929bad49f08bf1b9223a73.scope. Oct 2 19:12:51.898000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028aec8 items=0 ppid=1704 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337396361373562333332363463313863616231616234383535396139 Oct 2 19:12:51.903000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:12:51.903000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.903000 audit: BPF prog-id=80 op=LOAD Oct 2 19:12:51.903000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028b2d8 items=0 ppid=1704 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337396361373562333332363463313863616231616234383535396139 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit: BPF prog-id=81 op=LOAD Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1705 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630333739626462313337653530636136343134643335653536333232 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1705 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630333739626462313337653530636136343134643335653536333232 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit: BPF prog-id=82 op=LOAD Oct 2 19:12:51.936000 audit[1861]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000096de0 items=0 ppid=1705 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630333739626462313337653530636136343134643335653536333232 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit: BPF prog-id=83 op=LOAD Oct 2 19:12:51.936000 audit[1861]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000096e28 items=0 ppid=1705 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630333739626462313337653530636136343134643335653536333232 Oct 2 19:12:51.936000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:12:51.936000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { perfmon } for pid=1861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit[1861]: AVC avc: denied { bpf } for pid=1861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:51.936000 audit: BPF prog-id=84 op=LOAD Oct 2 19:12:51.936000 audit[1861]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000097238 items=0 ppid=1705 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:51.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630333739626462313337653530636136343134643335653536333232 Oct 2 19:12:51.944617 env[1108]: time="2023-10-02T19:12:51.944555639Z" level=info msg="StartContainer for \"64702a74a8c5568a861ae13929f0fe8fb299658d73e452e258f6710dca08a3eb\" returns successfully" Oct 2 19:12:51.961378 env[1108]: time="2023-10-02T19:12:51.961327669Z" level=info msg="StartContainer for \"c79ca75b33264c18cab1ab48559a9595e03aa437f0209f22e306d4a644c995f9\" returns successfully" Oct 2 19:12:51.976559 env[1108]: time="2023-10-02T19:12:51.976507870Z" level=info msg="StartContainer for \"f0379bdb137e50ca6414d35e5632218260ed0930f1929bad49f08bf1b9223a73\" returns successfully" Oct 2 19:12:52.039258 kubelet[1648]: E1002 19:12:52.039138 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:52.042363 kubelet[1648]: E1002 19:12:52.042324 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:52.044399 kubelet[1648]: E1002 19:12:52.044382 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:52.578000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:52.578000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0008ae000 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:12:52.578000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:52.579000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:52.579000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000574020 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:12:52.579000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:53.048149 kubelet[1648]: E1002 19:12:53.048082 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:53.049094 kubelet[1648]: E1002 19:12:53.049057 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:53.123326 kubelet[1648]: I1002 19:12:53.123284 1648 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:12:53.380000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:53.380000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c003584000 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:12:53.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:53.380000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:53.380000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c003c5f980 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:12:53.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:53.380000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:53.380000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c00355a1e0 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:12:53.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:53.388000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:53.388000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00238e180 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:12:53.388000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:53.449000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6800 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:53.449000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c003d1fc20 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:12:53.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:53.449000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:53.449000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3e a1=c003d1fe60 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:12:53.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:53.452359 kubelet[1648]: I1002 19:12:53.452325 1648 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:12:53.471854 kubelet[1648]: E1002 19:12:53.471804 1648 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:12:53.572398 kubelet[1648]: E1002 19:12:53.572352 1648 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:12:53.673356 kubelet[1648]: E1002 19:12:53.673189 1648 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:12:54.011505 kubelet[1648]: I1002 19:12:54.011435 1648 apiserver.go:52] "Watching apiserver" Oct 2 19:12:54.014229 kubelet[1648]: I1002 19:12:54.014193 1648 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:12:54.044357 kubelet[1648]: I1002 19:12:54.044317 1648 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:12:54.050810 kubelet[1648]: E1002 19:12:54.050776 1648 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:54.051195 kubelet[1648]: E1002 19:12:54.051175 1648 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:56.557983 systemd[1]: Reloading. Oct 2 19:12:56.617798 /usr/lib/systemd/system-generators/torcx-generator[1949]: time="2023-10-02T19:12:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:12:56.617828 /usr/lib/systemd/system-generators/torcx-generator[1949]: time="2023-10-02T19:12:56Z" level=info msg="torcx already run" Oct 2 19:12:56.686405 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:12:56.686430 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:12:56.704418 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:12:56.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.789268 kernel: kauditd_printk_skb: 655 callbacks suppressed Oct 2 19:12:56.789368 kernel: audit: type=1400 audit(1696273976.785:665): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.789402 kernel: audit: type=1400 audit(1696273976.785:666): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.793947 kernel: audit: type=1400 audit(1696273976.785:667): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.794131 kernel: audit: type=1400 audit(1696273976.785:668): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.798576 kernel: audit: type=1400 audit(1696273976.785:669): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.798633 kernel: audit: type=1400 audit(1696273976.785:670): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.800537 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:12:56.800595 kernel: audit: type=1400 audit(1696273976.785:671): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.803069 kernel: audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:12:56.803113 kernel: audit: type=1400 audit(1696273976.785:672): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit: BPF prog-id=85 op=LOAD Oct 2 19:12:56.788000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.790000 audit: BPF prog-id=86 op=LOAD Oct 2 19:12:56.790000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:12:56.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit: BPF prog-id=87 op=LOAD Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.792000 audit: BPF prog-id=88 op=LOAD Oct 2 19:12:56.792000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:12:56.792000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:12:56.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit: BPF prog-id=89 op=LOAD Oct 2 19:12:56.795000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.797000 audit: BPF prog-id=90 op=LOAD Oct 2 19:12:56.797000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:12:56.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit: BPF prog-id=91 op=LOAD Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.804000 audit: BPF prog-id=92 op=LOAD Oct 2 19:12:56.804000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:12:56.804000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.805000 audit: BPF prog-id=93 op=LOAD Oct 2 19:12:56.805000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.806000 audit: BPF prog-id=94 op=LOAD Oct 2 19:12:56.806000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.807000 audit: BPF prog-id=95 op=LOAD Oct 2 19:12:56.807000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit: BPF prog-id=96 op=LOAD Oct 2 19:12:56.808000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit: BPF prog-id=97 op=LOAD Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.808000 audit: BPF prog-id=98 op=LOAD Oct 2 19:12:56.808000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:12:56.808000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.811000 audit: BPF prog-id=99 op=LOAD Oct 2 19:12:56.811000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.812000 audit: BPF prog-id=100 op=LOAD Oct 2 19:12:56.812000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.813000 audit: BPF prog-id=101 op=LOAD Oct 2 19:12:56.813000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.815000 audit: BPF prog-id=102 op=LOAD Oct 2 19:12:56.815000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit: BPF prog-id=103 op=LOAD Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.816000 audit: BPF prog-id=104 op=LOAD Oct 2 19:12:56.816000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:12:56.816000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.817000 audit: BPF prog-id=105 op=LOAD Oct 2 19:12:56.817000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:12:56.829824 kubelet[1648]: I1002 19:12:56.829694 1648 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:12:56.829806 systemd[1]: Stopping kubelet.service... Oct 2 19:12:56.851535 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:12:56.851714 systemd[1]: Stopped kubelet.service. Oct 2 19:12:56.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:56.853595 systemd[1]: Started kubelet.service. Oct 2 19:12:56.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:56.904238 kubelet[1992]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:12:56.904238 kubelet[1992]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:12:56.904238 kubelet[1992]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:12:56.904534 kubelet[1992]: I1002 19:12:56.904284 1992 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:12:56.911564 kubelet[1992]: I1002 19:12:56.911531 1992 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:12:56.911746 kubelet[1992]: I1002 19:12:56.911732 1992 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:12:56.912022 kubelet[1992]: I1002 19:12:56.912007 1992 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:12:56.913474 kubelet[1992]: I1002 19:12:56.913459 1992 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:12:56.914471 kubelet[1992]: I1002 19:12:56.914448 1992 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:12:56.918268 kubelet[1992]: I1002 19:12:56.918250 1992 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:12:56.918569 kubelet[1992]: I1002 19:12:56.918556 1992 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:12:56.918731 kubelet[1992]: I1002 19:12:56.918714 1992 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:12:56.918894 kubelet[1992]: I1002 19:12:56.918861 1992 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:12:56.918984 kubelet[1992]: I1002 19:12:56.918969 1992 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:12:56.919084 kubelet[1992]: I1002 19:12:56.919069 1992 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:12:56.922538 kubelet[1992]: I1002 19:12:56.922516 1992 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:12:56.922727 kubelet[1992]: I1002 19:12:56.922713 1992 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:12:56.922810 kubelet[1992]: I1002 19:12:56.922796 1992 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:12:56.922888 kubelet[1992]: I1002 19:12:56.922874 1992 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:12:56.950959 kubelet[1992]: I1002 19:12:56.950924 1992 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:12:56.951498 kubelet[1992]: I1002 19:12:56.951480 1992 server.go:1168] "Started kubelet" Oct 2 19:12:56.953000 audit[1992]: AVC avc: denied { mac_admin } for pid=1992 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.953000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:12:56.953000 audit[1992]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00083f770 a1=c000c1a7e0 a2=c00083f740 a3=25 items=0 ppid=1 pid=1992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:56.953000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:12:56.953000 audit[1992]: AVC avc: denied { mac_admin } for pid=1992 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:56.953000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:12:56.953000 audit[1992]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000501a40 a1=c000c1a7f8 a2=c00083f800 a3=25 items=0 ppid=1 pid=1992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:56.953000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:12:56.954902 kubelet[1992]: I1002 19:12:56.954503 1992 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:12:56.954902 kubelet[1992]: I1002 19:12:56.954546 1992 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:12:56.954902 kubelet[1992]: I1002 19:12:56.954572 1992 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:12:56.955065 kubelet[1992]: E1002 19:12:56.955041 1992 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:12:56.955125 kubelet[1992]: E1002 19:12:56.955069 1992 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:12:56.957793 kubelet[1992]: I1002 19:12:56.957771 1992 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:12:56.958494 kubelet[1992]: I1002 19:12:56.958475 1992 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:12:56.959008 kubelet[1992]: I1002 19:12:56.958986 1992 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:12:56.967448 kubelet[1992]: I1002 19:12:56.967402 1992 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:12:56.968469 kubelet[1992]: I1002 19:12:56.968450 1992 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:12:56.995690 kubelet[1992]: I1002 19:12:56.995664 1992 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:12:56.997329 kubelet[1992]: I1002 19:12:56.997313 1992 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:12:56.997454 kubelet[1992]: I1002 19:12:56.997440 1992 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:12:56.998425 kubelet[1992]: I1002 19:12:56.998376 1992 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:12:56.998473 kubelet[1992]: E1002 19:12:56.998447 1992 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:12:57.019298 kubelet[1992]: I1002 19:12:57.019270 1992 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:12:57.019467 kubelet[1992]: I1002 19:12:57.019451 1992 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:12:57.019578 kubelet[1992]: I1002 19:12:57.019564 1992 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:12:57.019813 kubelet[1992]: I1002 19:12:57.019799 1992 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:12:57.019891 kubelet[1992]: I1002 19:12:57.019878 1992 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:12:57.019968 kubelet[1992]: I1002 19:12:57.019954 1992 policy_none.go:49] "None policy: Start" Oct 2 19:12:57.020662 kubelet[1992]: I1002 19:12:57.020629 1992 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:12:57.020715 kubelet[1992]: I1002 19:12:57.020690 1992 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:12:57.020906 kubelet[1992]: I1002 19:12:57.020888 1992 state_mem.go:75] "Updated machine memory state" Oct 2 19:12:57.027066 kubelet[1992]: I1002 19:12:57.027041 1992 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:12:57.025000 audit[1992]: AVC avc: denied { mac_admin } for pid=1992 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:57.025000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:12:57.025000 audit[1992]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c8e990 a1=c0009e48a0 a2=c000c8e960 a3=25 items=0 ppid=1 pid=1992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:57.025000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:12:57.027575 kubelet[1992]: I1002 19:12:57.027551 1992 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:12:57.027861 kubelet[1992]: I1002 19:12:57.027848 1992 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:12:57.072234 kubelet[1992]: I1002 19:12:57.072098 1992 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:12:57.081430 kubelet[1992]: I1002 19:12:57.081364 1992 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:12:57.081601 kubelet[1992]: I1002 19:12:57.081458 1992 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:12:57.098691 kubelet[1992]: I1002 19:12:57.098646 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:12:57.098865 kubelet[1992]: I1002 19:12:57.098730 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:12:57.098865 kubelet[1992]: I1002 19:12:57.098767 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:12:57.270340 kubelet[1992]: I1002 19:12:57.270255 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6b05603258166ee8ac644314736ab2e4-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"6b05603258166ee8ac644314736ab2e4\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:57.270512 kubelet[1992]: I1002 19:12:57.270359 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:57.270512 kubelet[1992]: I1002 19:12:57.270409 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:57.270512 kubelet[1992]: I1002 19:12:57.270441 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:57.270512 kubelet[1992]: I1002 19:12:57.270475 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:12:57.270634 kubelet[1992]: I1002 19:12:57.270523 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6b05603258166ee8ac644314736ab2e4-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"6b05603258166ee8ac644314736ab2e4\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:57.270634 kubelet[1992]: I1002 19:12:57.270574 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6b05603258166ee8ac644314736ab2e4-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"6b05603258166ee8ac644314736ab2e4\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:57.270634 kubelet[1992]: I1002 19:12:57.270610 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:57.270704 kubelet[1992]: I1002 19:12:57.270643 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:57.602985 kubelet[1992]: E1002 19:12:57.602949 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:57.603256 kubelet[1992]: E1002 19:12:57.603030 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:57.603478 kubelet[1992]: E1002 19:12:57.603450 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:57.950960 kubelet[1992]: I1002 19:12:57.950895 1992 apiserver.go:52] "Watching apiserver" Oct 2 19:12:57.974975 kubelet[1992]: I1002 19:12:57.974895 1992 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:12:58.008906 kubelet[1992]: E1002 19:12:58.008840 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:58.010034 kubelet[1992]: E1002 19:12:58.010002 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:58.016406 kubelet[1992]: E1002 19:12:58.016344 1992 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:12:58.016665 kubelet[1992]: E1002 19:12:58.016640 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:58.053352 kubelet[1992]: I1002 19:12:58.053282 1992 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.053195334 podCreationTimestamp="2023-10-02 19:12:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:12:58.040644665 +0000 UTC m=+1.184004695" watchObservedRunningTime="2023-10-02 19:12:58.053195334 +0000 UTC m=+1.196555364" Oct 2 19:12:58.062449 kubelet[1992]: I1002 19:12:58.062393 1992 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.062337585 podCreationTimestamp="2023-10-02 19:12:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:12:58.053914335 +0000 UTC m=+1.197274375" watchObservedRunningTime="2023-10-02 19:12:58.062337585 +0000 UTC m=+1.205697615" Oct 2 19:12:58.075132 kubelet[1992]: I1002 19:12:58.075038 1992 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:12:58.456000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.456000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010de3a0 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:12:58.456000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:58.457000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.457000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007745a0 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:12:58.457000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:58.463000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.463000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007746e0 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:12:58.463000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:58.465000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.465000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c7c280 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:12:58.465000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:59.010852 kubelet[1992]: E1002 19:12:59.010809 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:59.011547 kubelet[1992]: E1002 19:12:59.011523 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:01.668870 sudo[1235]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:01.667000 audit[1235]: USER_END pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:01.667000 audit[1235]: CRED_DISP pid=1235 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:01.670525 sshd[1231]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:01.670000 audit[1231]: USER_END pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:01.670000 audit[1231]: CRED_DISP pid=1231 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:01.672893 systemd[1]: sshd@6-10.0.0.71:22-10.0.0.1:57348.service: Deactivated successfully. Oct 2 19:13:01.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.71:22-10.0.0.1:57348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:01.673694 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:13:01.673871 systemd[1]: session-7.scope: Consumed 3.905s CPU time. Oct 2 19:13:01.674276 systemd-logind[1096]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:13:01.674980 systemd-logind[1096]: Removed session 7. Oct 2 19:13:02.007936 update_engine[1101]: I1002 19:13:02.007858 1101 update_attempter.cc:505] Updating boot flags... Oct 2 19:13:04.124224 kubelet[1992]: E1002 19:13:04.124164 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:04.143346 kubelet[1992]: I1002 19:13:04.143297 1992 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=7.143266575 podCreationTimestamp="2023-10-02 19:12:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:12:58.062786019 +0000 UTC m=+1.206146049" watchObservedRunningTime="2023-10-02 19:13:04.143266575 +0000 UTC m=+7.286626605" Oct 2 19:13:05.018924 kubelet[1992]: E1002 19:13:05.018870 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:06.020969 kubelet[1992]: E1002 19:13:06.020909 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:06.686671 kubelet[1992]: E1002 19:13:06.686616 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:07.021825 kubelet[1992]: E1002 19:13:07.021715 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:07.893140 kubelet[1992]: E1002 19:13:07.893106 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:10.690000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:13:10.693815 kernel: kauditd_printk_skb: 275 callbacks suppressed Oct 2 19:13:10.693912 kernel: audit: type=1400 audit(1696273990.690:918): avc: denied { watch } for pid=1847 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:13:10.690000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010695c0 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:13:10.701419 kernel: audit: type=1300 audit(1696273990.690:918): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010695c0 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:13:10.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:10.712233 kernel: audit: type=1327 audit(1696273990.690:918): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:10.793647 kubelet[1992]: I1002 19:13:10.793616 1992 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:13:10.794569 env[1108]: time="2023-10-02T19:13:10.794517720Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:13:10.795063 kubelet[1992]: I1002 19:13:10.794698 1992 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:13:11.254684 kubelet[1992]: I1002 19:13:11.254630 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:13:11.260997 systemd[1]: Created slice kubepods-besteffort-podda183ca0_b8e4_4c25_bd34_43e67729c076.slice. Oct 2 19:13:11.365544 kubelet[1992]: I1002 19:13:11.365469 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/da183ca0-b8e4-4c25-bd34-43e67729c076-xtables-lock\") pod \"kube-proxy-bsdrc\" (UID: \"da183ca0-b8e4-4c25-bd34-43e67729c076\") " pod="kube-system/kube-proxy-bsdrc" Oct 2 19:13:11.365544 kubelet[1992]: I1002 19:13:11.365530 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/da183ca0-b8e4-4c25-bd34-43e67729c076-kube-proxy\") pod \"kube-proxy-bsdrc\" (UID: \"da183ca0-b8e4-4c25-bd34-43e67729c076\") " pod="kube-system/kube-proxy-bsdrc" Oct 2 19:13:11.365544 kubelet[1992]: I1002 19:13:11.365563 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/da183ca0-b8e4-4c25-bd34-43e67729c076-lib-modules\") pod \"kube-proxy-bsdrc\" (UID: \"da183ca0-b8e4-4c25-bd34-43e67729c076\") " pod="kube-system/kube-proxy-bsdrc" Oct 2 19:13:11.365825 kubelet[1992]: I1002 19:13:11.365591 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zwhxq\" (UniqueName: \"kubernetes.io/projected/da183ca0-b8e4-4c25-bd34-43e67729c076-kube-api-access-zwhxq\") pod \"kube-proxy-bsdrc\" (UID: \"da183ca0-b8e4-4c25-bd34-43e67729c076\") " pod="kube-system/kube-proxy-bsdrc" Oct 2 19:13:11.375461 kubelet[1992]: I1002 19:13:11.375402 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:13:11.383317 systemd[1]: Created slice kubepods-besteffort-podb7be0c6b_4be3_4de3_b923_16d6d08b6203.slice. Oct 2 19:13:11.566981 kubelet[1992]: I1002 19:13:11.566830 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b7be0c6b-4be3-4de3-b923-16d6d08b6203-var-lib-calico\") pod \"tigera-operator-59c686f986-65n6r\" (UID: \"b7be0c6b-4be3-4de3-b923-16d6d08b6203\") " pod="tigera-operator/tigera-operator-59c686f986-65n6r" Oct 2 19:13:11.566981 kubelet[1992]: I1002 19:13:11.566881 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mm2hq\" (UniqueName: \"kubernetes.io/projected/b7be0c6b-4be3-4de3-b923-16d6d08b6203-kube-api-access-mm2hq\") pod \"tigera-operator-59c686f986-65n6r\" (UID: \"b7be0c6b-4be3-4de3-b923-16d6d08b6203\") " pod="tigera-operator/tigera-operator-59c686f986-65n6r" Oct 2 19:13:11.571074 kubelet[1992]: E1002 19:13:11.571051 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:11.571656 env[1108]: time="2023-10-02T19:13:11.571589042Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bsdrc,Uid:da183ca0-b8e4-4c25-bd34-43e67729c076,Namespace:kube-system,Attempt:0,}" Oct 2 19:13:11.686792 env[1108]: time="2023-10-02T19:13:11.686728872Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-59c686f986-65n6r,Uid:b7be0c6b-4be3-4de3-b923-16d6d08b6203,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:13:11.693742 env[1108]: time="2023-10-02T19:13:11.693666585Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:13:11.693742 env[1108]: time="2023-10-02T19:13:11.693707327Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:13:11.693742 env[1108]: time="2023-10-02T19:13:11.693720888Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:13:11.693919 env[1108]: time="2023-10-02T19:13:11.693862887Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/31ebeaba950d6d9733082a051749e982121f82315a4faba95e40daaf894e3acd pid=2108 runtime=io.containerd.runc.v2 Oct 2 19:13:11.706307 systemd[1]: Started cri-containerd-31ebeaba950d6d9733082a051749e982121f82315a4faba95e40daaf894e3acd.scope. Oct 2 19:13:11.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719096 kernel: audit: type=1400 audit(1696273991.713:919): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719155 kernel: audit: type=1400 audit(1696273991.713:920): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719176 kernel: audit: type=1400 audit(1696273991.713:921): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.722981 kernel: audit: type=1400 audit(1696273991.713:922): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.725056 kernel: audit: type=1400 audit(1696273991.713:923): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.725123 kernel: audit: type=1400 audit(1696273991.713:924): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.728898 kernel: audit: type=1400 audit(1696273991.713:925): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.717000 audit: BPF prog-id=106 op=LOAD Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2108 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331656265616261393530643664393733333038326130353137343965 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2108 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331656265616261393530643664393733333038326130353137343965 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.718000 audit: BPF prog-id=107 op=LOAD Oct 2 19:13:11.718000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001e1470 items=0 ppid=2108 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331656265616261393530643664393733333038326130353137343965 Oct 2 19:13:11.719000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.719000 audit: BPF prog-id=108 op=LOAD Oct 2 19:13:11.719000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001e14b8 items=0 ppid=2108 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331656265616261393530643664393733333038326130353137343965 Oct 2 19:13:11.723000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:13:11.723000 audit: BPF prog-id=107 op=UNLOAD Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { perfmon } for pid=2118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit[2118]: AVC avc: denied { bpf } for pid=2118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.723000 audit: BPF prog-id=109 op=LOAD Oct 2 19:13:11.723000 audit[2118]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0001e18c8 items=0 ppid=2108 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331656265616261393530643664393733333038326130353137343965 Oct 2 19:13:11.740410 env[1108]: time="2023-10-02T19:13:11.740368272Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bsdrc,Uid:da183ca0-b8e4-4c25-bd34-43e67729c076,Namespace:kube-system,Attempt:0,} returns sandbox id \"31ebeaba950d6d9733082a051749e982121f82315a4faba95e40daaf894e3acd\"" Oct 2 19:13:11.741535 kubelet[1992]: E1002 19:13:11.741075 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:11.743415 env[1108]: time="2023-10-02T19:13:11.743342616Z" level=info msg="CreateContainer within sandbox \"31ebeaba950d6d9733082a051749e982121f82315a4faba95e40daaf894e3acd\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:13:11.881687 env[1108]: time="2023-10-02T19:13:11.880897809Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:13:11.881687 env[1108]: time="2023-10-02T19:13:11.880940255Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:13:11.881687 env[1108]: time="2023-10-02T19:13:11.880956842Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:13:11.881687 env[1108]: time="2023-10-02T19:13:11.881111089Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba pid=2148 runtime=io.containerd.runc.v2 Oct 2 19:13:11.890163 env[1108]: time="2023-10-02T19:13:11.890109259Z" level=info msg="CreateContainer within sandbox \"31ebeaba950d6d9733082a051749e982121f82315a4faba95e40daaf894e3acd\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"e1f362e485f7978717e234010f70f6fd70ed6430da27f4ccc7027ba1109e7bdc\"" Oct 2 19:13:11.892662 env[1108]: time="2023-10-02T19:13:11.892604294Z" level=info msg="StartContainer for \"e1f362e485f7978717e234010f70f6fd70ed6430da27f4ccc7027ba1109e7bdc\"" Oct 2 19:13:11.894017 systemd[1]: Started cri-containerd-df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba.scope. Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.908000 audit: BPF prog-id=110 op=LOAD Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2148 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466323261613436306264343164643238626636363363366531313632 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2148 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466323261613436306264343164643238626636363363366531313632 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit: BPF prog-id=111 op=LOAD Oct 2 19:13:11.909000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003ca690 items=0 ppid=2148 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466323261613436306264343164643238626636363363366531313632 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit: BPF prog-id=112 op=LOAD Oct 2 19:13:11.909000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003ca6d8 items=0 ppid=2148 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466323261613436306264343164643238626636363363366531313632 Oct 2 19:13:11.909000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:13:11.909000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.909000 audit: BPF prog-id=113 op=LOAD Oct 2 19:13:11.909000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003caae8 items=0 ppid=2148 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466323261613436306264343164643238626636363363366531313632 Oct 2 19:13:11.914792 systemd[1]: Started cri-containerd-e1f362e485f7978717e234010f70f6fd70ed6430da27f4ccc7027ba1109e7bdc.scope. Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2108 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531663336326534383566373937383731376532333430313066373066 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.931000 audit: BPF prog-id=114 op=LOAD Oct 2 19:13:11.931000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000b8870 items=0 ppid=2108 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531663336326534383566373937383731376532333430313066373066 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit: BPF prog-id=115 op=LOAD Oct 2 19:13:11.932000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000b88b8 items=0 ppid=2108 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531663336326534383566373937383731376532333430313066373066 Oct 2 19:13:11.932000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:13:11.932000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:11.932000 audit: BPF prog-id=116 op=LOAD Oct 2 19:13:11.932000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000b8948 items=0 ppid=2108 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:11.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531663336326534383566373937383731376532333430313066373066 Oct 2 19:13:11.942493 env[1108]: time="2023-10-02T19:13:11.942443321Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-59c686f986-65n6r,Uid:b7be0c6b-4be3-4de3-b923-16d6d08b6203,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\"" Oct 2 19:13:11.946754 env[1108]: time="2023-10-02T19:13:11.944422756Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:13:12.056000 audit[2238]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.056000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe76360d0 a2=0 a3=7fffe76360bc items=0 ppid=2193 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.056000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:13:12.056000 audit[2239]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.056000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe2b036a50 a2=0 a3=7ffe2b036a3c items=0 ppid=2193 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.056000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:13:12.057000 audit[2240]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.057000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd504d07e0 a2=0 a3=7ffd504d07cc items=0 ppid=2193 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.057000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:13:12.059000 audit[2241]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.059000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff246ebb70 a2=0 a3=7fff246ebb5c items=0 ppid=2193 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.059000 audit[2242]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.059000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc51f10450 a2=0 a3=7ffc51f1043c items=0 ppid=2193 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:13:12.059000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:13:12.061000 audit[2243]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.061000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe81b73fd0 a2=0 a3=7ffe81b73fbc items=0 ppid=2193 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.061000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:13:12.161000 audit[2244]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.161000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffddff13aa0 a2=0 a3=7ffddff13a8c items=0 ppid=2193 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.161000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:13:12.163000 audit[2246]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.163000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd71f60010 a2=0 a3=7ffd71f5fffc items=0 ppid=2193 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.163000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:13:12.167000 audit[2249]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.167000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff26f53670 a2=0 a3=7fff26f5365c items=0 ppid=2193 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.167000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:13:12.168000 audit[2250]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.168000 audit[2250]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff29c9ddf0 a2=0 a3=7fff29c9dddc items=0 ppid=2193 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.168000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:13:12.171000 audit[2252]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.171000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff94065380 a2=0 a3=7fff9406536c items=0 ppid=2193 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.171000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:13:12.172000 audit[2253]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.172000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef563fe70 a2=0 a3=7ffef563fe5c items=0 ppid=2193 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.172000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:13:12.175000 audit[2255]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.175000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd40ff9ad0 a2=0 a3=7ffd40ff9abc items=0 ppid=2193 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.175000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:13:12.178000 audit[2258]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.178000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffe395b030 a2=0 a3=7fffe395b01c items=0 ppid=2193 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.178000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:13:12.179000 audit[2259]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.179000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff49c2c700 a2=0 a3=7fff49c2c6ec items=0 ppid=2193 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.179000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:13:12.181000 audit[2261]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.181000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffca210b1c0 a2=0 a3=7ffca210b1ac items=0 ppid=2193 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.181000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:13:12.182000 audit[2262]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.182000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff261be890 a2=0 a3=7fff261be87c items=0 ppid=2193 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.182000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:13:12.184000 audit[2264]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.184000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd15b87e70 a2=0 a3=7ffd15b87e5c items=0 ppid=2193 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.184000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:13:12.188000 audit[2267]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.188000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf7546180 a2=0 a3=7ffcf754616c items=0 ppid=2193 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.188000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:13:12.191000 audit[2270]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.191000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc91256a80 a2=0 a3=7ffc91256a6c items=0 ppid=2193 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.191000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:13:12.192000 audit[2271]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2271 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.192000 audit[2271]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc22756830 a2=0 a3=7ffc2275681c items=0 ppid=2193 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.192000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:13:12.194000 audit[2273]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2273 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.194000 audit[2273]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe75132640 a2=0 a3=7ffe7513262c items=0 ppid=2193 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.194000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:13:12.198000 audit[2276]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.198000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffce40d27a0 a2=0 a3=7ffce40d278c items=0 ppid=2193 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.198000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:13:12.202622 env[1108]: time="2023-10-02T19:13:12.202548389Z" level=info msg="StartContainer for \"e1f362e485f7978717e234010f70f6fd70ed6430da27f4ccc7027ba1109e7bdc\" returns successfully" Oct 2 19:13:12.207000 audit[2281]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.207000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd46d09b50 a2=0 a3=7ffd46d09b3c items=0 ppid=2193 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.207000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:13:12.209000 audit[2283]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:12.209000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd45d42d80 a2=0 a3=7ffd45d42d6c items=0 ppid=2193 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.209000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:13:12.221000 audit[2285]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2285 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:12.221000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd2f3c8400 a2=0 a3=7ffd2f3c83ec items=0 ppid=2193 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.221000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:12.227000 audit[2285]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:12.227000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd2f3c8400 a2=0 a3=7ffd2f3c83ec items=0 ppid=2193 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.227000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:12.232000 audit[2292]: NETFILTER_CFG table=filter:65 family=2 entries=14 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:12.232000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffc706d7380 a2=0 a3=7ffc706d736c items=0 ppid=2193 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.232000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:12.233000 audit[2292]: NETFILTER_CFG table=nat:66 family=2 entries=12 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:12.233000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffc706d7380 a2=0 a3=31030 items=0 ppid=2193 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.233000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:12.239000 audit[2293]: NETFILTER_CFG table=filter:67 family=10 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.239000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffefc7e7a50 a2=0 a3=7ffefc7e7a3c items=0 ppid=2193 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.239000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:13:12.241000 audit[2295]: NETFILTER_CFG table=filter:68 family=10 entries=2 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.241000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd91701dd0 a2=0 a3=7ffd91701dbc items=0 ppid=2193 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.241000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:13:12.246000 audit[2298]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.246000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdc69b0370 a2=0 a3=7ffdc69b035c items=0 ppid=2193 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.246000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:13:12.247000 audit[2299]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.247000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc48f6c6a0 a2=0 a3=7ffc48f6c68c items=0 ppid=2193 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.247000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:13:12.250000 audit[2301]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.250000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff6e517450 a2=0 a3=7fff6e51743c items=0 ppid=2193 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.250000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:13:12.251000 audit[2302]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.251000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff4de0c80 a2=0 a3=7ffff4de0c6c items=0 ppid=2193 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.251000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:13:12.254000 audit[2304]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.254000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff71574360 a2=0 a3=7fff7157434c items=0 ppid=2193 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.254000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:13:12.258000 audit[2307]: NETFILTER_CFG table=filter:74 family=10 entries=2 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.258000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffdc31061f0 a2=0 a3=7ffdc31061dc items=0 ppid=2193 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.258000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:13:12.259000 audit[2308]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.259000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc969fd000 a2=0 a3=7ffc969fcfec items=0 ppid=2193 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.259000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:13:12.261000 audit[2310]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.261000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffec9754cf0 a2=0 a3=7ffec9754cdc items=0 ppid=2193 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.261000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:13:12.262000 audit[2311]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.262000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc30e7e780 a2=0 a3=7ffc30e7e76c items=0 ppid=2193 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.262000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:13:12.265000 audit[2313]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.265000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcb04bb6c0 a2=0 a3=7ffcb04bb6ac items=0 ppid=2193 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.265000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:13:12.269000 audit[2316]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.269000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd472ac080 a2=0 a3=7ffd472ac06c items=0 ppid=2193 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.269000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:13:12.273000 audit[2319]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.273000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd9c289d40 a2=0 a3=7ffd9c289d2c items=0 ppid=2193 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.273000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:13:12.274000 audit[2320]: NETFILTER_CFG table=nat:81 family=10 entries=1 op=nft_register_chain pid=2320 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.274000 audit[2320]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff0828b650 a2=0 a3=7fff0828b63c items=0 ppid=2193 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.274000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:13:12.276000 audit[2322]: NETFILTER_CFG table=nat:82 family=10 entries=2 op=nft_register_chain pid=2322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.276000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffecfa1dd20 a2=0 a3=7ffecfa1dd0c items=0 ppid=2193 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.276000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:13:12.281000 audit[2325]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.281000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffce1fbccf0 a2=0 a3=7ffce1fbccdc items=0 ppid=2193 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.281000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:13:12.282000 audit[2326]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2326 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.282000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff24b1b4a0 a2=0 a3=7fff24b1b48c items=0 ppid=2193 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.282000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:13:12.285000 audit[2328]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.285000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff219c4db0 a2=0 a3=7fff219c4d9c items=0 ppid=2193 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.285000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:13:12.288000 audit[2331]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.288000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff4e461a20 a2=0 a3=7fff4e461a0c items=0 ppid=2193 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.288000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:13:12.290000 audit[2332]: NETFILTER_CFG table=nat:87 family=10 entries=1 op=nft_register_chain pid=2332 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.290000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe4c871980 a2=0 a3=7ffe4c87196c items=0 ppid=2193 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.290000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:13:12.292000 audit[2334]: NETFILTER_CFG table=nat:88 family=10 entries=2 op=nft_register_chain pid=2334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:13:12.292000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffde30aebb0 a2=0 a3=7ffde30aeb9c items=0 ppid=2193 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.292000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:13:12.295000 audit[2336]: NETFILTER_CFG table=filter:89 family=10 entries=3 op=nft_register_rule pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:13:12.295000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffcef6fcb70 a2=0 a3=7ffcef6fcb5c items=0 ppid=2193 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.295000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:12.296000 audit[2336]: NETFILTER_CFG table=nat:90 family=10 entries=7 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:13:12.296000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffcef6fcb70 a2=0 a3=7ffcef6fcb5c items=0 ppid=2193 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:12.296000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:13.207764 kubelet[1992]: E1002 19:13:13.207701 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:13.219410 kubelet[1992]: I1002 19:13:13.219363 1992 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-bsdrc" podStartSLOduration=2.219313926 podCreationTimestamp="2023-10-02 19:13:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:13:13.219093517 +0000 UTC m=+16.362453547" watchObservedRunningTime="2023-10-02 19:13:13.219313926 +0000 UTC m=+16.362673957" Oct 2 19:13:15.272674 env[1108]: time="2023-10-02T19:13:15.272600552Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:15.276894 env[1108]: time="2023-10-02T19:13:15.276848353Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:15.281060 env[1108]: time="2023-10-02T19:13:15.281019355Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:15.283508 env[1108]: time="2023-10-02T19:13:15.283458947Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:15.284079 env[1108]: time="2023-10-02T19:13:15.284050405Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1\"" Oct 2 19:13:15.285922 env[1108]: time="2023-10-02T19:13:15.285893339Z" level=info msg="CreateContainer within sandbox \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:13:15.308592 env[1108]: time="2023-10-02T19:13:15.308518041Z" level=info msg="CreateContainer within sandbox \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\"" Oct 2 19:13:15.309107 env[1108]: time="2023-10-02T19:13:15.309066134Z" level=info msg="StartContainer for \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\"" Oct 2 19:13:15.328791 systemd[1]: Started cri-containerd-2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc.scope. Oct 2 19:13:15.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit: BPF prog-id=117 op=LOAD Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2148 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:15.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333264313231646464343234663138363839646362386138343364 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2148 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:15.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333264313231646464343234663138363839646362386138343364 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit: BPF prog-id=118 op=LOAD Oct 2 19:13:15.342000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00037ecc0 items=0 ppid=2148 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:15.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333264313231646464343234663138363839646362386138343364 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.342000 audit: BPF prog-id=119 op=LOAD Oct 2 19:13:15.342000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00037ed08 items=0 ppid=2148 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:15.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333264313231646464343234663138363839646362386138343364 Oct 2 19:13:15.342000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:13:15.342000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:15.343000 audit: BPF prog-id=120 op=LOAD Oct 2 19:13:15.343000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00037f118 items=0 ppid=2148 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:15.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264333264313231646464343234663138363839646362386138343364 Oct 2 19:13:15.364615 env[1108]: time="2023-10-02T19:13:15.363389038Z" level=info msg="StartContainer for \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\" returns successfully" Oct 2 19:13:16.222824 kubelet[1992]: I1002 19:13:16.222765 1992 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-59c686f986-65n6r" podStartSLOduration=1.882040553 podCreationTimestamp="2023-10-02 19:13:11 +0000 UTC" firstStartedPulling="2023-10-02 19:13:11.943711966 +0000 UTC m=+15.087071996" lastFinishedPulling="2023-10-02 19:13:15.28438986 +0000 UTC m=+18.427749890" observedRunningTime="2023-10-02 19:13:16.222572379 +0000 UTC m=+19.365932429" watchObservedRunningTime="2023-10-02 19:13:16.222718447 +0000 UTC m=+19.366078487" Oct 2 19:13:17.430000 audit[2376]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:17.432849 kernel: kauditd_printk_skb: 366 callbacks suppressed Oct 2 19:13:17.432938 kernel: audit: type=1325 audit(1696273997.430:1032): table=filter:91 family=2 entries=15 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:17.430000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7fff0d061dd0 a2=0 a3=7fff0d061dbc items=0 ppid=2193 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:17.437720 kernel: audit: type=1300 audit(1696273997.430:1032): arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7fff0d061dd0 a2=0 a3=7fff0d061dbc items=0 ppid=2193 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:17.437919 kernel: audit: type=1327 audit(1696273997.430:1032): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:17.430000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:17.430000 audit[2376]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:17.430000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7fff0d061dd0 a2=0 a3=31030 items=0 ppid=2193 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:17.450576 kernel: audit: type=1325 audit(1696273997.430:1033): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:17.450671 kernel: audit: type=1300 audit(1696273997.430:1033): arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7fff0d061dd0 a2=0 a3=31030 items=0 ppid=2193 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:17.450705 kernel: audit: type=1327 audit(1696273997.430:1033): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:17.430000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:17.449000 audit[2378]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:17.449000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7fff3b5ea540 a2=0 a3=7fff3b5ea52c items=0 ppid=2193 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:17.462466 kernel: audit: type=1325 audit(1696273997.449:1034): table=filter:93 family=2 entries=16 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:17.462548 kernel: audit: type=1300 audit(1696273997.449:1034): arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7fff3b5ea540 a2=0 a3=7fff3b5ea52c items=0 ppid=2193 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:17.462581 kernel: audit: type=1327 audit(1696273997.449:1034): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:17.449000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:17.456000 audit[2378]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:17.456000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7fff3b5ea540 a2=0 a3=31030 items=0 ppid=2193 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:17.456000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:17.467232 kernel: audit: type=1325 audit(1696273997.456:1035): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:18.303596 kubelet[1992]: I1002 19:13:18.303549 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:13:18.308991 systemd[1]: Created slice kubepods-besteffort-podf44c9cc7_f2c5_45f0_a02e_cccdc841b504.slice. Oct 2 19:13:18.331559 kubelet[1992]: I1002 19:13:18.331503 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:13:18.337350 systemd[1]: Created slice kubepods-besteffort-pod960d2141_983a_4716_a250_539705ec6736.slice. Oct 2 19:13:18.410359 kubelet[1992]: I1002 19:13:18.410301 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f44c9cc7-f2c5-45f0-a02e-cccdc841b504-tigera-ca-bundle\") pod \"calico-typha-6894746b66-v5gdt\" (UID: \"f44c9cc7-f2c5-45f0-a02e-cccdc841b504\") " pod="calico-system/calico-typha-6894746b66-v5gdt" Oct 2 19:13:18.410359 kubelet[1992]: I1002 19:13:18.410358 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5c2c8\" (UniqueName: \"kubernetes.io/projected/f44c9cc7-f2c5-45f0-a02e-cccdc841b504-kube-api-access-5c2c8\") pod \"calico-typha-6894746b66-v5gdt\" (UID: \"f44c9cc7-f2c5-45f0-a02e-cccdc841b504\") " pod="calico-system/calico-typha-6894746b66-v5gdt" Oct 2 19:13:18.410578 kubelet[1992]: I1002 19:13:18.410380 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/f44c9cc7-f2c5-45f0-a02e-cccdc841b504-typha-certs\") pod \"calico-typha-6894746b66-v5gdt\" (UID: \"f44c9cc7-f2c5-45f0-a02e-cccdc841b504\") " pod="calico-system/calico-typha-6894746b66-v5gdt" Oct 2 19:13:18.474000 audit[2380]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:18.474000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffc6fc84f40 a2=0 a3=7ffc6fc84f2c items=0 ppid=2193 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.474000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:18.475000 audit[2380]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:18.475000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffc6fc84f40 a2=0 a3=31030 items=0 ppid=2193 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.475000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:18.510889 kubelet[1992]: I1002 19:13:18.510840 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/960d2141-983a-4716-a250-539705ec6736-lib-modules\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.511227 kubelet[1992]: I1002 19:13:18.511191 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/960d2141-983a-4716-a250-539705ec6736-tigera-ca-bundle\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.511367 kubelet[1992]: I1002 19:13:18.511345 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/960d2141-983a-4716-a250-539705ec6736-cni-net-dir\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.511518 kubelet[1992]: I1002 19:13:18.511499 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/960d2141-983a-4716-a250-539705ec6736-xtables-lock\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.511698 kubelet[1992]: I1002 19:13:18.511670 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/960d2141-983a-4716-a250-539705ec6736-policysync\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.511815 kubelet[1992]: I1002 19:13:18.511796 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/960d2141-983a-4716-a250-539705ec6736-cni-log-dir\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.511966 kubelet[1992]: I1002 19:13:18.511944 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zjthp\" (UniqueName: \"kubernetes.io/projected/960d2141-983a-4716-a250-539705ec6736-kube-api-access-zjthp\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.512089 kubelet[1992]: I1002 19:13:18.512071 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/960d2141-983a-4716-a250-539705ec6736-var-run-calico\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.512242 kubelet[1992]: I1002 19:13:18.512193 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/960d2141-983a-4716-a250-539705ec6736-flexvol-driver-host\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.512242 kubelet[1992]: I1002 19:13:18.512248 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/960d2141-983a-4716-a250-539705ec6736-cni-bin-dir\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.512454 kubelet[1992]: I1002 19:13:18.512278 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/960d2141-983a-4716-a250-539705ec6736-var-lib-calico\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.512454 kubelet[1992]: I1002 19:13:18.512322 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/960d2141-983a-4716-a250-539705ec6736-node-certs\") pod \"calico-node-f8vfp\" (UID: \"960d2141-983a-4716-a250-539705ec6736\") " pod="calico-system/calico-node-f8vfp" Oct 2 19:13:18.613297 kubelet[1992]: E1002 19:13:18.613153 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:18.614132 env[1108]: time="2023-10-02T19:13:18.613856333Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6894746b66-v5gdt,Uid:f44c9cc7-f2c5-45f0-a02e-cccdc841b504,Namespace:calico-system,Attempt:0,}" Oct 2 19:13:18.628928 kubelet[1992]: E1002 19:13:18.628902 1992 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:13:18.629118 kubelet[1992]: W1002 19:13:18.629096 1992 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:13:18.629238 kubelet[1992]: E1002 19:13:18.629203 1992 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:13:18.632541 kubelet[1992]: E1002 19:13:18.632522 1992 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:13:18.632670 kubelet[1992]: W1002 19:13:18.632652 1992 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:13:18.632768 kubelet[1992]: E1002 19:13:18.632749 1992 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:13:18.641880 kubelet[1992]: E1002 19:13:18.641842 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:18.642546 env[1108]: time="2023-10-02T19:13:18.642491240Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-f8vfp,Uid:960d2141-983a-4716-a250-539705ec6736,Namespace:calico-system,Attempt:0,}" Oct 2 19:13:18.932495 env[1108]: time="2023-10-02T19:13:18.932031780Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:13:18.932495 env[1108]: time="2023-10-02T19:13:18.932086147Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:13:18.932495 env[1108]: time="2023-10-02T19:13:18.932099997Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:13:18.932495 env[1108]: time="2023-10-02T19:13:18.932280828Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/07b0915c4baa57fd6aa3c9f605f323bdf3c08cc72c7bdad26844b0b2fd066e1a pid=2395 runtime=io.containerd.runc.v2 Oct 2 19:13:18.938976 env[1108]: time="2023-10-02T19:13:18.938891791Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:13:18.938976 env[1108]: time="2023-10-02T19:13:18.938938822Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:13:18.938976 env[1108]: time="2023-10-02T19:13:18.938950478Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:13:18.939482 env[1108]: time="2023-10-02T19:13:18.939435896Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2e83a1a30f6e7f3ea34bc4dc477d5803afd4df10ab2274fe1a3dcbeb4be316f5 pid=2413 runtime=io.containerd.runc.v2 Oct 2 19:13:18.952327 systemd[1]: Started cri-containerd-07b0915c4baa57fd6aa3c9f605f323bdf3c08cc72c7bdad26844b0b2fd066e1a.scope. Oct 2 19:13:18.964114 systemd[1]: Started cri-containerd-2e83a1a30f6e7f3ea34bc4dc477d5803afd4df10ab2274fe1a3dcbeb4be316f5.scope. Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.972000 audit: BPF prog-id=121 op=LOAD Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2395 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037623039313563346261613537666436616133633966363035663332 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2395 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037623039313563346261613537666436616133633966363035663332 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit: BPF prog-id=122 op=LOAD Oct 2 19:13:18.973000 audit[2412]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000094bb0 items=0 ppid=2395 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037623039313563346261613537666436616133633966363035663332 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit: BPF prog-id=123 op=LOAD Oct 2 19:13:18.973000 audit[2412]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000094bf8 items=0 ppid=2395 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037623039313563346261613537666436616133633966363035663332 Oct 2 19:13:18.973000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:13:18.973000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { perfmon } for pid=2412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[2412]: AVC avc: denied { bpf } for pid=2412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit: BPF prog-id=124 op=LOAD Oct 2 19:13:18.973000 audit[2412]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000095008 items=0 ppid=2395 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037623039313563346261613537666436616133633966363035663332 Oct 2 19:13:18.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit: BPF prog-id=125 op=LOAD Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2413 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383361316133306636653766336561333462633464633437376435 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2413 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383361316133306636653766336561333462633464633437376435 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit: BPF prog-id=126 op=LOAD Oct 2 19:13:18.974000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003b46f0 items=0 ppid=2413 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383361316133306636653766336561333462633464633437376435 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit: BPF prog-id=127 op=LOAD Oct 2 19:13:18.974000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003b4738 items=0 ppid=2413 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383361316133306636653766336561333462633464633437376435 Oct 2 19:13:18.974000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:13:18.974000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { perfmon } for pid=2425 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit[2425]: AVC avc: denied { bpf } for pid=2425 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:18.974000 audit: BPF prog-id=128 op=LOAD Oct 2 19:13:18.974000 audit[2425]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003b4b48 items=0 ppid=2413 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:18.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265383361316133306636653766336561333462633464633437376435 Oct 2 19:13:19.001164 env[1108]: time="2023-10-02T19:13:19.001109226Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-f8vfp,Uid:960d2141-983a-4716-a250-539705ec6736,Namespace:calico-system,Attempt:0,} returns sandbox id \"2e83a1a30f6e7f3ea34bc4dc477d5803afd4df10ab2274fe1a3dcbeb4be316f5\"" Oct 2 19:13:19.002777 kubelet[1992]: E1002 19:13:19.002746 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:19.005784 env[1108]: time="2023-10-02T19:13:19.005732700Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:13:19.010614 env[1108]: time="2023-10-02T19:13:19.010561395Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6894746b66-v5gdt,Uid:f44c9cc7-f2c5-45f0-a02e-cccdc841b504,Namespace:calico-system,Attempt:0,} returns sandbox id \"07b0915c4baa57fd6aa3c9f605f323bdf3c08cc72c7bdad26844b0b2fd066e1a\"" Oct 2 19:13:19.012197 kubelet[1992]: E1002 19:13:19.011428 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:23.561548 env[1108]: time="2023-10-02T19:13:23.561483593Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:23.563883 env[1108]: time="2023-10-02T19:13:23.563826723Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:23.566454 env[1108]: time="2023-10-02T19:13:23.566414612Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:23.568766 env[1108]: time="2023-10-02T19:13:23.568729684Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:23.571847 env[1108]: time="2023-10-02T19:13:23.571811529Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72\"" Oct 2 19:13:23.572391 env[1108]: time="2023-10-02T19:13:23.572364610Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 19:13:23.573362 env[1108]: time="2023-10-02T19:13:23.573336797Z" level=info msg="CreateContainer within sandbox \"2e83a1a30f6e7f3ea34bc4dc477d5803afd4df10ab2274fe1a3dcbeb4be316f5\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:13:23.595573 env[1108]: time="2023-10-02T19:13:23.595489909Z" level=info msg="CreateContainer within sandbox \"2e83a1a30f6e7f3ea34bc4dc477d5803afd4df10ab2274fe1a3dcbeb4be316f5\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"f72f59583635bd56e26c14fe7f61c7366cfc450d56015147efaadb6bee05687c\"" Oct 2 19:13:23.596146 env[1108]: time="2023-10-02T19:13:23.596098067Z" level=info msg="StartContainer for \"f72f59583635bd56e26c14fe7f61c7366cfc450d56015147efaadb6bee05687c\"" Oct 2 19:13:23.615000 systemd[1]: run-containerd-runc-k8s.io-f72f59583635bd56e26c14fe7f61c7366cfc450d56015147efaadb6bee05687c-runc.q6N1Tn.mount: Deactivated successfully. Oct 2 19:13:23.616462 systemd[1]: Started cri-containerd-f72f59583635bd56e26c14fe7f61c7366cfc450d56015147efaadb6bee05687c.scope. Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.637081 kernel: kauditd_printk_skb: 122 callbacks suppressed Oct 2 19:13:23.637232 kernel: audit: type=1400 audit(1696274003.634:1074): avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.637259 kernel: audit: type=1300 audit(1696274003.634:1074): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2413 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:23.634000 audit[2476]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2413 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:23.639994 kernel: audit: type=1327 audit(1696274003.634:1074): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637326635393538333633356264353665323663313466653766363163 Oct 2 19:13:23.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637326635393538333633356264353665323663313466653766363163 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.644541 kernel: audit: type=1400 audit(1696274003.634:1075): avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.646490 kernel: audit: type=1400 audit(1696274003.634:1075): avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.646556 kernel: audit: type=1400 audit(1696274003.634:1075): avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.650554 kernel: audit: type=1400 audit(1696274003.634:1075): avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.652913 kernel: audit: type=1400 audit(1696274003.634:1075): avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.655166 kernel: audit: type=1400 audit(1696274003.634:1075): avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.655268 kernel: audit: type=1400 audit(1696274003.634:1075): avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.634000 audit: BPF prog-id=129 op=LOAD Oct 2 19:13:23.634000 audit[2476]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c00020af00 items=0 ppid=2413 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:23.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637326635393538333633356264353665323663313466653766363163 Oct 2 19:13:23.639000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.639000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.639000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.639000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.639000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.639000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.639000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.639000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.639000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.639000 audit: BPF prog-id=130 op=LOAD Oct 2 19:13:23.639000 audit[2476]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c00020af48 items=0 ppid=2413 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:23.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637326635393538333633356264353665323663313466653766363163 Oct 2 19:13:23.642000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:13:23.642000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:23.642000 audit: BPF prog-id=131 op=LOAD Oct 2 19:13:23.642000 audit[2476]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c00020afd8 items=0 ppid=2413 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:23.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637326635393538333633356264353665323663313466653766363163 Oct 2 19:13:23.665014 env[1108]: time="2023-10-02T19:13:23.664918962Z" level=info msg="StartContainer for \"f72f59583635bd56e26c14fe7f61c7366cfc450d56015147efaadb6bee05687c\" returns successfully" Oct 2 19:13:23.672966 systemd[1]: cri-containerd-f72f59583635bd56e26c14fe7f61c7366cfc450d56015147efaadb6bee05687c.scope: Deactivated successfully. Oct 2 19:13:23.676000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:13:23.752538 env[1108]: time="2023-10-02T19:13:23.752465814Z" level=info msg="shim disconnected" id=f72f59583635bd56e26c14fe7f61c7366cfc450d56015147efaadb6bee05687c Oct 2 19:13:23.752538 env[1108]: time="2023-10-02T19:13:23.752521471Z" level=warning msg="cleaning up after shim disconnected" id=f72f59583635bd56e26c14fe7f61c7366cfc450d56015147efaadb6bee05687c namespace=k8s.io Oct 2 19:13:23.752538 env[1108]: time="2023-10-02T19:13:23.752542386Z" level=info msg="cleaning up dead shim" Oct 2 19:13:23.760207 env[1108]: time="2023-10-02T19:13:23.760165465Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:13:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2513 runtime=io.containerd.runc.v2\n" Oct 2 19:13:24.226961 kubelet[1992]: E1002 19:13:24.226929 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:24.588162 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f72f59583635bd56e26c14fe7f61c7366cfc450d56015147efaadb6bee05687c-rootfs.mount: Deactivated successfully. Oct 2 19:13:26.122677 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount559806154.mount: Deactivated successfully. Oct 2 19:13:26.791557 systemd[1]: Started sshd@7-10.0.0.71:22-10.0.0.1:46400.service. Oct 2 19:13:26.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.71:22-10.0.0.1:46400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.838000 audit[2531]: USER_ACCT pid=2531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:26.840418 sshd[2531]: Accepted publickey for core from 10.0.0.1 port 46400 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:26.840000 audit[2531]: CRED_ACQ pid=2531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:26.840000 audit[2531]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb30d64b0 a2=3 a3=0 items=0 ppid=1 pid=2531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:26.840000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:26.842438 sshd[2531]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:26.847880 systemd-logind[1096]: New session 8 of user core. Oct 2 19:13:26.848746 systemd[1]: Started session-8.scope. Oct 2 19:13:26.852000 audit[2531]: USER_START pid=2531 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:26.853000 audit[2533]: CRED_ACQ pid=2533 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:27.542349 sshd[2531]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:27.543000 audit[2531]: USER_END pid=2531 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:27.543000 audit[2531]: CRED_DISP pid=2531 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:27.544706 systemd[1]: sshd@7-10.0.0.71:22-10.0.0.1:46400.service: Deactivated successfully. Oct 2 19:13:27.545579 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:13:27.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.71:22-10.0.0.1:46400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:27.546176 systemd-logind[1096]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:13:27.547060 systemd-logind[1096]: Removed session 8. Oct 2 19:13:27.862091 env[1108]: time="2023-10-02T19:13:27.861826993Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:27.864622 env[1108]: time="2023-10-02T19:13:27.864568175Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:27.866873 env[1108]: time="2023-10-02T19:13:27.866820445Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:27.870063 env[1108]: time="2023-10-02T19:13:27.869995014Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:27.871033 env[1108]: time="2023-10-02T19:13:27.870969021Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f\"" Oct 2 19:13:27.872674 env[1108]: time="2023-10-02T19:13:27.872633812Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:13:27.874170 env[1108]: time="2023-10-02T19:13:27.874116633Z" level=info msg="CreateContainer within sandbox \"07b0915c4baa57fd6aa3c9f605f323bdf3c08cc72c7bdad26844b0b2fd066e1a\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 19:13:27.890571 env[1108]: time="2023-10-02T19:13:27.890489372Z" level=info msg="CreateContainer within sandbox \"07b0915c4baa57fd6aa3c9f605f323bdf3c08cc72c7bdad26844b0b2fd066e1a\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"700e225cb4634e1605e182a6a9055dd33aaed08d0d4b4f9e87896981f0fc9e89\"" Oct 2 19:13:27.891185 env[1108]: time="2023-10-02T19:13:27.891134753Z" level=info msg="StartContainer for \"700e225cb4634e1605e182a6a9055dd33aaed08d0d4b4f9e87896981f0fc9e89\"" Oct 2 19:13:27.908439 systemd[1]: Started cri-containerd-700e225cb4634e1605e182a6a9055dd33aaed08d0d4b4f9e87896981f0fc9e89.scope. Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.921000 audit: BPF prog-id=132 op=LOAD Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2395 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:27.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730306532323563623436333465313630356531383261366139303535 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2395 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:27.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730306532323563623436333465313630356531383261366139303535 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit: BPF prog-id=133 op=LOAD Oct 2 19:13:27.922000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031fa10 items=0 ppid=2395 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:27.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730306532323563623436333465313630356531383261366139303535 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit: BPF prog-id=134 op=LOAD Oct 2 19:13:27.922000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031fa58 items=0 ppid=2395 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:27.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730306532323563623436333465313630356531383261366139303535 Oct 2 19:13:27.922000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:13:27.922000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:27.922000 audit: BPF prog-id=135 op=LOAD Oct 2 19:13:27.922000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00031fe68 items=0 ppid=2395 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:27.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730306532323563623436333465313630356531383261366139303535 Oct 2 19:13:28.231873 env[1108]: time="2023-10-02T19:13:28.231795082Z" level=info msg="StartContainer for \"700e225cb4634e1605e182a6a9055dd33aaed08d0d4b4f9e87896981f0fc9e89\" returns successfully" Oct 2 19:13:28.235386 kubelet[1992]: E1002 19:13:28.235353 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:28.345628 kubelet[1992]: I1002 19:13:28.345588 1992 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-6894746b66-v5gdt" podStartSLOduration=1.48584739 podCreationTimestamp="2023-10-02 19:13:18 +0000 UTC" firstStartedPulling="2023-10-02 19:13:19.012686115 +0000 UTC m=+22.156046145" lastFinishedPulling="2023-10-02 19:13:27.872369009 +0000 UTC m=+31.015729039" observedRunningTime="2023-10-02 19:13:28.344921975 +0000 UTC m=+31.488282005" watchObservedRunningTime="2023-10-02 19:13:28.345530284 +0000 UTC m=+31.488890324" Oct 2 19:13:28.879000 audit[2586]: NETFILTER_CFG table=filter:97 family=2 entries=15 op=nft_register_rule pid=2586 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:28.882685 kernel: kauditd_printk_skb: 102 callbacks suppressed Oct 2 19:13:28.882903 kernel: audit: type=1325 audit(1696274008.879:1108): table=filter:97 family=2 entries=15 op=nft_register_rule pid=2586 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:28.882947 kernel: audit: type=1300 audit(1696274008.879:1108): arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd4d5eda00 a2=0 a3=7ffd4d5ed9ec items=0 ppid=2193 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:28.879000 audit[2586]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd4d5eda00 a2=0 a3=7ffd4d5ed9ec items=0 ppid=2193 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:28.885704 kernel: audit: type=1327 audit(1696274008.879:1108): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:28.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:28.879000 audit[2586]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=2586 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:28.879000 audit[2586]: SYSCALL arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffd4d5eda00 a2=0 a3=7ffd4d5ed9ec items=0 ppid=2193 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:28.900656 kernel: audit: type=1325 audit(1696274008.879:1109): table=nat:98 family=2 entries=19 op=nft_register_chain pid=2586 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:28.900756 kernel: audit: type=1300 audit(1696274008.879:1109): arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffd4d5eda00 a2=0 a3=7ffd4d5ed9ec items=0 ppid=2193 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:28.900777 kernel: audit: type=1327 audit(1696274008.879:1109): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:28.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:29.237328 kubelet[1992]: E1002 19:13:29.237280 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:30.239583 kubelet[1992]: E1002 19:13:30.239543 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:31.001085 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1033886297.mount: Deactivated successfully. Oct 2 19:13:35.204926 env[1108]: time="2023-10-02T19:13:35.204855129Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:35.208462 env[1108]: time="2023-10-02T19:13:35.208413364Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:35.210141 env[1108]: time="2023-10-02T19:13:35.210106154Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:35.212996 env[1108]: time="2023-10-02T19:13:35.212923836Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:35.213561 env[1108]: time="2023-10-02T19:13:35.213523449Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7\"" Oct 2 19:13:35.215849 env[1108]: time="2023-10-02T19:13:35.215807804Z" level=info msg="CreateContainer within sandbox \"2e83a1a30f6e7f3ea34bc4dc477d5803afd4df10ab2274fe1a3dcbeb4be316f5\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:13:35.230740 env[1108]: time="2023-10-02T19:13:35.230663484Z" level=info msg="CreateContainer within sandbox \"2e83a1a30f6e7f3ea34bc4dc477d5803afd4df10ab2274fe1a3dcbeb4be316f5\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"eea77101228ffcaf7254867f42ce8f889a510a96a472ba881b19ad2a2d73e870\"" Oct 2 19:13:35.231389 env[1108]: time="2023-10-02T19:13:35.231336358Z" level=info msg="StartContainer for \"eea77101228ffcaf7254867f42ce8f889a510a96a472ba881b19ad2a2d73e870\"" Oct 2 19:13:35.257383 systemd[1]: run-containerd-runc-k8s.io-eea77101228ffcaf7254867f42ce8f889a510a96a472ba881b19ad2a2d73e870-runc.FAJaBU.mount: Deactivated successfully. Oct 2 19:13:35.261926 systemd[1]: Started cri-containerd-eea77101228ffcaf7254867f42ce8f889a510a96a472ba881b19ad2a2d73e870.scope. Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit[2594]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2413 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:35.281621 kernel: audit: type=1400 audit(1696274015.274:1110): avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.281716 kernel: audit: type=1300 audit(1696274015.274:1110): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2413 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:35.281765 kernel: audit: type=1327 audit(1696274015.274:1110): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565613737313031323238666663616637323534383637663432636538 Oct 2 19:13:35.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565613737313031323238666663616637323534383637663432636538 Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.286429 kernel: audit: type=1400 audit(1696274015.274:1111): avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.286489 kernel: audit: type=1400 audit(1696274015.274:1111): avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.288330 kernel: audit: type=1400 audit(1696274015.274:1111): avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.295359 kernel: audit: type=1400 audit(1696274015.274:1111): avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.295454 kernel: audit: type=1400 audit(1696274015.274:1111): avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.295495 kernel: audit: type=1400 audit(1696274015.274:1111): avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.296792 env[1108]: time="2023-10-02T19:13:35.296742425Z" level=info msg="StartContainer for \"eea77101228ffcaf7254867f42ce8f889a510a96a472ba881b19ad2a2d73e870\" returns successfully" Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.299367 kernel: audit: type=1400 audit(1696274015.274:1111): avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.274000 audit: BPF prog-id=136 op=LOAD Oct 2 19:13:35.274000 audit[2594]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000093510 items=0 ppid=2413 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:35.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565613737313031323238666663616637323534383637663432636538 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit: BPF prog-id=137 op=LOAD Oct 2 19:13:35.275000 audit[2594]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000093558 items=0 ppid=2413 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:35.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565613737313031323238666663616637323534383637663432636538 Oct 2 19:13:35.275000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:13:35.275000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:35.275000 audit: BPF prog-id=138 op=LOAD Oct 2 19:13:35.275000 audit[2594]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000935e8 items=0 ppid=2413 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:35.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565613737313031323238666663616637323534383637663432636538 Oct 2 19:13:36.252711 kubelet[1992]: E1002 19:13:36.252677 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:36.657587 env[1108]: time="2023-10-02T19:13:36.657413043Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:13:36.660713 systemd[1]: cri-containerd-eea77101228ffcaf7254867f42ce8f889a510a96a472ba881b19ad2a2d73e870.scope: Deactivated successfully. Oct 2 19:13:36.665000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:13:36.679184 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eea77101228ffcaf7254867f42ce8f889a510a96a472ba881b19ad2a2d73e870-rootfs.mount: Deactivated successfully. Oct 2 19:13:36.693111 kubelet[1992]: I1002 19:13:36.693076 1992 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 19:13:36.696983 env[1108]: time="2023-10-02T19:13:36.696925972Z" level=info msg="shim disconnected" id=eea77101228ffcaf7254867f42ce8f889a510a96a472ba881b19ad2a2d73e870 Oct 2 19:13:36.697132 env[1108]: time="2023-10-02T19:13:36.696990224Z" level=warning msg="cleaning up after shim disconnected" id=eea77101228ffcaf7254867f42ce8f889a510a96a472ba881b19ad2a2d73e870 namespace=k8s.io Oct 2 19:13:36.697132 env[1108]: time="2023-10-02T19:13:36.697005466Z" level=info msg="cleaning up dead shim" Oct 2 19:13:36.716601 kubelet[1992]: I1002 19:13:36.713166 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:13:36.716601 kubelet[1992]: I1002 19:13:36.713386 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:13:36.716601 kubelet[1992]: I1002 19:13:36.714434 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:13:36.719133 env[1108]: time="2023-10-02T19:13:36.719094683Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:13:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2644 runtime=io.containerd.runc.v2\n" Oct 2 19:13:36.719741 kubelet[1992]: I1002 19:13:36.719706 1992 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:13:36.723649 systemd[1]: Created slice kubepods-besteffort-podf589a762_5083_4073_a423_7886fa817b69.slice. Oct 2 19:13:36.730414 systemd[1]: Created slice kubepods-burstable-pod8a6273e5_22a9_4367_900d_d3c050deb6b1.slice. Oct 2 19:13:36.736668 systemd[1]: Created slice kubepods-burstable-pod0af74e32_824b_4dfe_b295_a3e3c69aff70.slice. Oct 2 19:13:36.740823 systemd[1]: Created slice kubepods-besteffort-podebe01108_b16f_455c_a06f_e81b35aae910.slice. Oct 2 19:13:36.841705 kubelet[1992]: I1002 19:13:36.841640 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/ebe01108-b16f-455c-a06f-e81b35aae910-varrun\") pod \"csi-node-driver-ps8zf\" (UID: \"ebe01108-b16f-455c-a06f-e81b35aae910\") " pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:36.841705 kubelet[1992]: I1002 19:13:36.841693 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/0af74e32-824b-4dfe-b295-a3e3c69aff70-config-volume\") pod \"coredns-5d78c9869d-nq92d\" (UID: \"0af74e32-824b-4dfe-b295-a3e3c69aff70\") " pod="kube-system/coredns-5d78c9869d-nq92d" Oct 2 19:13:36.841705 kubelet[1992]: I1002 19:13:36.841712 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6fwnl\" (UniqueName: \"kubernetes.io/projected/0af74e32-824b-4dfe-b295-a3e3c69aff70-kube-api-access-6fwnl\") pod \"coredns-5d78c9869d-nq92d\" (UID: \"0af74e32-824b-4dfe-b295-a3e3c69aff70\") " pod="kube-system/coredns-5d78c9869d-nq92d" Oct 2 19:13:36.841958 kubelet[1992]: I1002 19:13:36.841735 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/8a6273e5-22a9-4367-900d-d3c050deb6b1-config-volume\") pod \"coredns-5d78c9869d-9vvmg\" (UID: \"8a6273e5-22a9-4367-900d-d3c050deb6b1\") " pod="kube-system/coredns-5d78c9869d-9vvmg" Oct 2 19:13:36.841958 kubelet[1992]: I1002 19:13:36.841880 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s5qxs\" (UniqueName: \"kubernetes.io/projected/ebe01108-b16f-455c-a06f-e81b35aae910-kube-api-access-s5qxs\") pod \"csi-node-driver-ps8zf\" (UID: \"ebe01108-b16f-455c-a06f-e81b35aae910\") " pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:36.842008 kubelet[1992]: I1002 19:13:36.841972 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5shlq\" (UniqueName: \"kubernetes.io/projected/f589a762-5083-4073-a423-7886fa817b69-kube-api-access-5shlq\") pod \"calico-kube-controllers-7bd445fdb4-pr92n\" (UID: \"f589a762-5083-4073-a423-7886fa817b69\") " pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" Oct 2 19:13:36.842008 kubelet[1992]: I1002 19:13:36.841993 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/ebe01108-b16f-455c-a06f-e81b35aae910-registration-dir\") pod \"csi-node-driver-ps8zf\" (UID: \"ebe01108-b16f-455c-a06f-e81b35aae910\") " pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:36.842059 kubelet[1992]: I1002 19:13:36.842011 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8gcjt\" (UniqueName: \"kubernetes.io/projected/8a6273e5-22a9-4367-900d-d3c050deb6b1-kube-api-access-8gcjt\") pod \"coredns-5d78c9869d-9vvmg\" (UID: \"8a6273e5-22a9-4367-900d-d3c050deb6b1\") " pod="kube-system/coredns-5d78c9869d-9vvmg" Oct 2 19:13:36.842059 kubelet[1992]: I1002 19:13:36.842035 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/ebe01108-b16f-455c-a06f-e81b35aae910-kubelet-dir\") pod \"csi-node-driver-ps8zf\" (UID: \"ebe01108-b16f-455c-a06f-e81b35aae910\") " pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:36.842059 kubelet[1992]: I1002 19:13:36.842053 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/ebe01108-b16f-455c-a06f-e81b35aae910-socket-dir\") pod \"csi-node-driver-ps8zf\" (UID: \"ebe01108-b16f-455c-a06f-e81b35aae910\") " pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:36.842128 kubelet[1992]: I1002 19:13:36.842076 1992 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/ebe01108-b16f-455c-a06f-e81b35aae910-etccalico\") pod \"csi-node-driver-ps8zf\" (UID: \"ebe01108-b16f-455c-a06f-e81b35aae910\") " pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:37.029613 env[1108]: time="2023-10-02T19:13:37.029555054Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bd445fdb4-pr92n,Uid:f589a762-5083-4073-a423-7886fa817b69,Namespace:calico-system,Attempt:0,}" Oct 2 19:13:37.033813 kubelet[1992]: E1002 19:13:37.033785 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:37.034237 env[1108]: time="2023-10-02T19:13:37.034176575Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-9vvmg,Uid:8a6273e5-22a9-4367-900d-d3c050deb6b1,Namespace:kube-system,Attempt:0,}" Oct 2 19:13:37.039544 kubelet[1992]: E1002 19:13:37.039516 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:37.040101 env[1108]: time="2023-10-02T19:13:37.040059491Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-nq92d,Uid:0af74e32-824b-4dfe-b295-a3e3c69aff70,Namespace:kube-system,Attempt:0,}" Oct 2 19:13:37.044304 env[1108]: time="2023-10-02T19:13:37.044262014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-ps8zf,Uid:ebe01108-b16f-455c-a06f-e81b35aae910,Namespace:calico-system,Attempt:0,}" Oct 2 19:13:37.099940 kubelet[1992]: I1002 19:13:37.099912 1992 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:37.100162 kubelet[1992]: I1002 19:13:37.100144 1992 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:37.136976 env[1108]: time="2023-10-02T19:13:37.136891827Z" level=error msg="Failed to destroy network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.137317 env[1108]: time="2023-10-02T19:13:37.137282920Z" level=error msg="encountered an error cleaning up failed sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.137373 env[1108]: time="2023-10-02T19:13:37.137331088Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-nq92d,Uid:0af74e32-824b-4dfe-b295-a3e3c69aff70,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.137704 kubelet[1992]: E1002 19:13:37.137673 1992 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.137848 kubelet[1992]: E1002 19:13:37.137822 1992 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-nq92d" Oct 2 19:13:37.137904 kubelet[1992]: E1002 19:13:37.137880 1992 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-nq92d" Oct 2 19:13:37.137986 kubelet[1992]: E1002 19:13:37.137965 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-nq92d_kube-system(0af74e32-824b-4dfe-b295-a3e3c69aff70)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-nq92d_kube-system(0af74e32-824b-4dfe-b295-a3e3c69aff70)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-nq92d" podUID=0af74e32-824b-4dfe-b295-a3e3c69aff70 Oct 2 19:13:37.140522 env[1108]: time="2023-10-02T19:13:37.140461844Z" level=error msg="Failed to destroy network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.140730 env[1108]: time="2023-10-02T19:13:37.140704681Z" level=error msg="encountered an error cleaning up failed sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.140764 env[1108]: time="2023-10-02T19:13:37.140746256Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bd445fdb4-pr92n,Uid:f589a762-5083-4073-a423-7886fa817b69,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.140939 kubelet[1992]: E1002 19:13:37.140922 1992 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.141024 kubelet[1992]: E1002 19:13:37.140957 1992 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" Oct 2 19:13:37.141024 kubelet[1992]: E1002 19:13:37.140974 1992 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" Oct 2 19:13:37.141024 kubelet[1992]: E1002 19:13:37.141011 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7bd445fdb4-pr92n_calico-system(f589a762-5083-4073-a423-7886fa817b69)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7bd445fdb4-pr92n_calico-system(f589a762-5083-4073-a423-7886fa817b69)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" podUID=f589a762-5083-4073-a423-7886fa817b69 Oct 2 19:13:37.141158 env[1108]: time="2023-10-02T19:13:37.140978202Z" level=error msg="Failed to destroy network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.141367 env[1108]: time="2023-10-02T19:13:37.141340204Z" level=error msg="encountered an error cleaning up failed sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.141409 env[1108]: time="2023-10-02T19:13:37.141391870Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-9vvmg,Uid:8a6273e5-22a9-4367-900d-d3c050deb6b1,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.141617 kubelet[1992]: E1002 19:13:37.141595 1992 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.141684 kubelet[1992]: E1002 19:13:37.141654 1992 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-9vvmg" Oct 2 19:13:37.141684 kubelet[1992]: E1002 19:13:37.141675 1992 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-9vvmg" Oct 2 19:13:37.141737 kubelet[1992]: E1002 19:13:37.141725 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-9vvmg_kube-system(8a6273e5-22a9-4367-900d-d3c050deb6b1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-9vvmg_kube-system(8a6273e5-22a9-4367-900d-d3c050deb6b1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-9vvmg" podUID=8a6273e5-22a9-4367-900d-d3c050deb6b1 Oct 2 19:13:37.152847 kubelet[1992]: I1002 19:13:37.152746 1992 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:13:37.155133 kubelet[1992]: I1002 19:13:37.155092 1992 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc" size=16190758 Oct 2 19:13:37.155497 env[1108]: time="2023-10-02T19:13:37.155463377Z" level=info msg="RemoveImage \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:13:37.181157 env[1108]: time="2023-10-02T19:13:37.181104366Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.10.1,XXX_unrecognized:[],}" Oct 2 19:13:37.182321 env[1108]: time="2023-10-02T19:13:37.182228319Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,XXX_unrecognized:[],}" Oct 2 19:13:37.184343 env[1108]: time="2023-10-02T19:13:37.184308573Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,XXX_unrecognized:[],}" Oct 2 19:13:37.195979 env[1108]: time="2023-10-02T19:13:37.195913325Z" level=info msg="RemoveImage \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\" returns successfully" Oct 2 19:13:37.196355 kubelet[1992]: I1002 19:13:37.196304 1992 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" size=301773 Oct 2 19:13:37.196705 env[1108]: time="2023-10-02T19:13:37.196655486Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\"" Oct 2 19:13:37.198432 env[1108]: time="2023-10-02T19:13:37.198405703Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:13:37.199808 env[1108]: time="2023-10-02T19:13:37.199731100Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:13:37.200985 env[1108]: time="2023-10-02T19:13:37.200941550Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,XXX_unrecognized:[],}" Oct 2 19:13:37.224058 env[1108]: time="2023-10-02T19:13:37.223987210Z" level=error msg="Failed to destroy network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.224411 env[1108]: time="2023-10-02T19:13:37.224375415Z" level=error msg="encountered an error cleaning up failed sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.224453 env[1108]: time="2023-10-02T19:13:37.224427211Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-ps8zf,Uid:ebe01108-b16f-455c-a06f-e81b35aae910,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.224742 kubelet[1992]: E1002 19:13:37.224701 1992 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.224805 kubelet[1992]: E1002 19:13:37.224768 1992 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:37.224805 kubelet[1992]: E1002 19:13:37.224787 1992 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:37.224860 kubelet[1992]: E1002 19:13:37.224842 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-ps8zf_calico-system(ebe01108-b16f-455c-a06f-e81b35aae910)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-ps8zf_calico-system(ebe01108-b16f-455c-a06f-e81b35aae910)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-ps8zf" podUID=ebe01108-b16f-455c-a06f-e81b35aae910 Oct 2 19:13:37.238762 env[1108]: time="2023-10-02T19:13:37.238708959Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\" returns successfully" Oct 2 19:13:37.238993 kubelet[1992]: I1002 19:13:37.238963 1992 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681" size=101639218 Oct 2 19:13:37.239353 env[1108]: time="2023-10-02T19:13:37.239312868Z" level=info msg="RemoveImage \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:13:37.241558 env[1108]: time="2023-10-02T19:13:37.241526224Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.7-0,XXX_unrecognized:[],}" Oct 2 19:13:37.243871 env[1108]: time="2023-10-02T19:13:37.243847731Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,XXX_unrecognized:[],}" Oct 2 19:13:37.245683 env[1108]: time="2023-10-02T19:13:37.245655306Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,XXX_unrecognized:[],}" Oct 2 19:13:37.257544 kubelet[1992]: I1002 19:13:37.257505 1992 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:37.258275 env[1108]: time="2023-10-02T19:13:37.258197339Z" level=info msg="StopPodSandbox for \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\"" Oct 2 19:13:37.261276 kubelet[1992]: E1002 19:13:37.261203 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:37.263610 env[1108]: time="2023-10-02T19:13:37.263538425Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:13:37.265034 kubelet[1992]: I1002 19:13:37.265003 1992 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:37.265450 env[1108]: time="2023-10-02T19:13:37.265416654Z" level=info msg="StopPodSandbox for \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\"" Oct 2 19:13:37.267308 kubelet[1992]: I1002 19:13:37.266729 1992 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:37.268759 env[1108]: time="2023-10-02T19:13:37.268384848Z" level=info msg="StopPodSandbox for \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\"" Oct 2 19:13:37.280766 kubelet[1992]: I1002 19:13:37.280634 1992 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:37.281435 env[1108]: time="2023-10-02T19:13:37.281397895Z" level=info msg="StopPodSandbox for \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\"" Oct 2 19:13:37.306472 env[1108]: time="2023-10-02T19:13:37.306417511Z" level=info msg="RemoveImage \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\" returns successfully" Oct 2 19:13:37.317896 env[1108]: time="2023-10-02T19:13:37.317799837Z" level=error msg="StopPodSandbox for \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\" failed" error="failed to destroy network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.318113 kubelet[1992]: E1002 19:13:37.318090 1992 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:37.318236 kubelet[1992]: E1002 19:13:37.318145 1992 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92} Oct 2 19:13:37.318236 kubelet[1992]: E1002 19:13:37.318180 1992 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f589a762-5083-4073-a423-7886fa817b69\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:13:37.318236 kubelet[1992]: E1002 19:13:37.318220 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f589a762-5083-4073-a423-7886fa817b69\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" podUID=f589a762-5083-4073-a423-7886fa817b69 Oct 2 19:13:37.329956 kubelet[1992]: I1002 19:13:37.329913 1992 eviction_manager.go:353] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:13:37.342675 env[1108]: time="2023-10-02T19:13:37.342590433Z" level=error msg="StopPodSandbox for \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\" failed" error="failed to destroy network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.342978 kubelet[1992]: E1002 19:13:37.342945 1992 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:37.343072 kubelet[1992]: E1002 19:13:37.343011 1992 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4} Oct 2 19:13:37.343072 kubelet[1992]: E1002 19:13:37.343064 1992 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0af74e32-824b-4dfe-b295-a3e3c69aff70\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:13:37.343205 kubelet[1992]: E1002 19:13:37.343104 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0af74e32-824b-4dfe-b295-a3e3c69aff70\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-nq92d" podUID=0af74e32-824b-4dfe-b295-a3e3c69aff70 Oct 2 19:13:37.344255 env[1108]: time="2023-10-02T19:13:37.344200652Z" level=error msg="StopPodSandbox for \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\" failed" error="failed to destroy network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.344453 kubelet[1992]: E1002 19:13:37.344418 1992 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:37.344453 kubelet[1992]: E1002 19:13:37.344450 1992 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa} Oct 2 19:13:37.344533 kubelet[1992]: E1002 19:13:37.344489 1992 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8a6273e5-22a9-4367-900d-d3c050deb6b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:13:37.344533 kubelet[1992]: E1002 19:13:37.344520 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8a6273e5-22a9-4367-900d-d3c050deb6b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-9vvmg" podUID=8a6273e5-22a9-4367-900d-d3c050deb6b1 Oct 2 19:13:37.350099 env[1108]: time="2023-10-02T19:13:37.350018606Z" level=error msg="StopPodSandbox for \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\" failed" error="failed to destroy network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:13:37.350386 kubelet[1992]: E1002 19:13:37.350335 1992 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:37.350386 kubelet[1992]: E1002 19:13:37.350376 1992 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3} Oct 2 19:13:37.350501 kubelet[1992]: E1002 19:13:37.350420 1992 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ebe01108-b16f-455c-a06f-e81b35aae910\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:13:37.350501 kubelet[1992]: E1002 19:13:37.350458 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ebe01108-b16f-455c-a06f-e81b35aae910\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-ps8zf" podUID=ebe01108-b16f-455c-a06f-e81b35aae910 Oct 2 19:13:37.550147 systemd[1]: Started sshd@8-10.0.0.71:22-10.0.0.1:55034.service. Oct 2 19:13:37.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.71:22-10.0.0.1:55034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:37.594000 audit[2909]: USER_ACCT pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:37.594711 sshd[2909]: Accepted publickey for core from 10.0.0.1 port 55034 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:37.596000 audit[2909]: CRED_ACQ pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:37.596000 audit[2909]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0f99cef0 a2=3 a3=0 items=0 ppid=1 pid=2909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:37.596000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:37.596703 sshd[2909]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:37.600706 systemd-logind[1096]: New session 9 of user core. Oct 2 19:13:37.601781 systemd[1]: Started session-9.scope. Oct 2 19:13:37.606000 audit[2909]: USER_START pid=2909 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:37.607000 audit[2911]: CRED_ACQ pid=2911 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:37.681044 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92-shm.mount: Deactivated successfully. Oct 2 19:13:37.716937 sshd[2909]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:37.717000 audit[2909]: USER_END pid=2909 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:37.717000 audit[2909]: CRED_DISP pid=2909 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:37.720110 systemd[1]: sshd@8-10.0.0.71:22-10.0.0.1:55034.service: Deactivated successfully. Oct 2 19:13:37.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.71:22-10.0.0.1:55034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:37.721083 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:13:37.721795 systemd-logind[1096]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:13:37.722558 systemd-logind[1096]: Removed session 9. Oct 2 19:13:42.971241 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2517396066.mount: Deactivated successfully. Oct 2 19:13:44.104497 env[1108]: time="2023-10-02T19:13:44.104418443Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:44.108583 env[1108]: time="2023-10-02T19:13:44.108347409Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:44.111167 env[1108]: time="2023-10-02T19:13:44.111120105Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:44.113290 env[1108]: time="2023-10-02T19:13:44.113257400Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:44.113782 env[1108]: time="2023-10-02T19:13:44.113744590Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e\"" Oct 2 19:13:44.116329 env[1108]: time="2023-10-02T19:13:44.116266106Z" level=info msg="CreateContainer within sandbox \"2e83a1a30f6e7f3ea34bc4dc477d5803afd4df10ab2274fe1a3dcbeb4be316f5\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:13:44.138565 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount726611436.mount: Deactivated successfully. Oct 2 19:13:44.168764 env[1108]: time="2023-10-02T19:13:44.168666675Z" level=info msg="CreateContainer within sandbox \"2e83a1a30f6e7f3ea34bc4dc477d5803afd4df10ab2274fe1a3dcbeb4be316f5\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"fd7f2fbff44001ac62a25e2ac3a44c433b313b9a064af6788c53b4913456149e\"" Oct 2 19:13:44.169850 env[1108]: time="2023-10-02T19:13:44.169793435Z" level=info msg="StartContainer for \"fd7f2fbff44001ac62a25e2ac3a44c433b313b9a064af6788c53b4913456149e\"" Oct 2 19:13:44.194660 systemd[1]: run-containerd-runc-k8s.io-fd7f2fbff44001ac62a25e2ac3a44c433b313b9a064af6788c53b4913456149e-runc.Uztm9u.mount: Deactivated successfully. Oct 2 19:13:44.196006 systemd[1]: Started cri-containerd-fd7f2fbff44001ac62a25e2ac3a44c433b313b9a064af6788c53b4913456149e.scope. Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.219263 kernel: kauditd_printk_skb: 45 callbacks suppressed Oct 2 19:13:44.219529 kernel: audit: type=1400 audit(1696274024.217:1126): avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2413 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:44.224990 kernel: audit: type=1300 audit(1696274024.217:1126): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2413 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:44.225166 kernel: audit: type=1327 audit(1696274024.217:1126): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664376632666266663434303031616336326132356532616333613434 Oct 2 19:13:44.217000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664376632666266663434303031616336326132356532616333613434 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.230858 kernel: audit: type=1400 audit(1696274024.217:1127): avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.230914 kernel: audit: type=1400 audit(1696274024.217:1127): avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.233382 kernel: audit: type=1400 audit(1696274024.217:1127): avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.238502 kernel: audit: type=1400 audit(1696274024.217:1127): avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.241050 kernel: audit: type=1400 audit(1696274024.217:1127): avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.246775 kernel: audit: type=1400 audit(1696274024.217:1127): avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.246921 kernel: audit: type=1400 audit(1696274024.217:1127): avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.217000 audit: BPF prog-id=139 op=LOAD Oct 2 19:13:44.217000 audit[2931]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000024bc0 items=0 ppid=2413 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:44.217000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664376632666266663434303031616336326132356532616333613434 Oct 2 19:13:44.221000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.221000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.221000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.221000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.221000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.221000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.221000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.221000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.221000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.221000 audit: BPF prog-id=140 op=LOAD Oct 2 19:13:44.221000 audit[2931]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000024c08 items=0 ppid=2413 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:44.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664376632666266663434303031616336326132356532616333613434 Oct 2 19:13:44.224000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:13:44.224000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:44.224000 audit: BPF prog-id=141 op=LOAD Oct 2 19:13:44.224000 audit[2931]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000024c98 items=0 ppid=2413 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:44.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664376632666266663434303031616336326132356532616333613434 Oct 2 19:13:44.248997 env[1108]: time="2023-10-02T19:13:44.248783019Z" level=info msg="StartContainer for \"fd7f2fbff44001ac62a25e2ac3a44c433b313b9a064af6788c53b4913456149e\" returns successfully" Oct 2 19:13:44.297784 kubelet[1992]: E1002 19:13:44.297732 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:44.320377 kubelet[1992]: I1002 19:13:44.320327 1992 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-f8vfp" podStartSLOduration=1.21141692 podCreationTimestamp="2023-10-02 19:13:18 +0000 UTC" firstStartedPulling="2023-10-02 19:13:19.005185333 +0000 UTC m=+22.148545363" lastFinishedPulling="2023-10-02 19:13:44.114053798 +0000 UTC m=+47.257413828" observedRunningTime="2023-10-02 19:13:44.315374583 +0000 UTC m=+47.458734623" watchObservedRunningTime="2023-10-02 19:13:44.320285385 +0000 UTC m=+47.463645435" Oct 2 19:13:44.325096 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:13:44.325193 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:13:45.300292 kubelet[1992]: E1002 19:13:45.300175 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:46.301805 kubelet[1992]: E1002 19:13:46.301759 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:46.711000 audit[3107]: AVC avc: denied { write } for pid=3107 comm="tee" name="fd" dev="proc" ino=22489 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:13:46.711000 audit[3107]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe6509e98c a2=241 a3=1b6 items=1 ppid=3068 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.711000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:13:46.711000 audit: PATH item=0 name="/dev/fd/63" inode=24840 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:13:46.711000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:13:46.716000 audit[3098]: AVC avc: denied { write } for pid=3098 comm="tee" name="fd" dev="proc" ino=23351 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:13:46.716000 audit[3098]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc92d3498d a2=241 a3=1b6 items=1 ppid=3070 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.716000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:13:46.716000 audit: PATH item=0 name="/dev/fd/63" inode=23343 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:13:46.716000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:13:46.720000 audit[3123]: AVC avc: denied { write } for pid=3123 comm="tee" name="fd" dev="proc" ino=24336 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:13:46.720000 audit[3123]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff1d27a98b a2=241 a3=1b6 items=1 ppid=3083 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.720000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:13:46.720000 audit: PATH item=0 name="/dev/fd/63" inode=24329 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:13:46.720000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:13:46.725000 audit[3132]: AVC avc: denied { write } for pid=3132 comm="tee" name="fd" dev="proc" ino=23355 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:13:46.726000 audit[3129]: AVC avc: denied { write } for pid=3129 comm="tee" name="fd" dev="proc" ino=23358 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:13:46.727000 audit[3128]: AVC avc: denied { write } for pid=3128 comm="tee" name="fd" dev="proc" ino=23361 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:13:46.726000 audit[3129]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff3f96c97c a2=241 a3=1b6 items=1 ppid=3076 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.726000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:13:46.726000 audit: PATH item=0 name="/dev/fd/63" inode=24330 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:13:46.726000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:13:46.727000 audit[3128]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffda424597b a2=241 a3=1b6 items=1 ppid=3069 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.727000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:13:46.727000 audit: PATH item=0 name="/dev/fd/63" inode=24331 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:13:46.734000 audit[3152]: AVC avc: denied { write } for pid=3152 comm="tee" name="fd" dev="proc" ino=22504 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:13:46.734000 audit[3152]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcaa75798b a2=241 a3=1b6 items=1 ppid=3085 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.734000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:13:46.734000 audit: PATH item=0 name="/dev/fd/63" inode=23364 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:13:46.734000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:13:46.727000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:13:46.725000 audit[3132]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffed7a6a98b a2=241 a3=1b6 items=1 ppid=3071 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.725000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:13:46.725000 audit: PATH item=0 name="/dev/fd/63" inode=23348 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:13:46.725000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit: BPF prog-id=142 op=LOAD Oct 2 19:13:46.964000 audit[3215]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff0258cff0 a2=70 a3=7f6d4ed06000 items=0 ppid=3074 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.964000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:13:46.964000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit: BPF prog-id=143 op=LOAD Oct 2 19:13:46.964000 audit[3215]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff0258cff0 a2=70 a3=6e items=0 ppid=3074 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.964000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:13:46.964000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff0258cfa0 a2=70 a3=7fff0258cff0 items=0 ppid=3074 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.964000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit: BPF prog-id=144 op=LOAD Oct 2 19:13:46.964000 audit[3215]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff0258cf80 a2=70 a3=7fff0258cff0 items=0 ppid=3074 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.964000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:13:46.964000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff0258d060 a2=70 a3=0 items=0 ppid=3074 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.964000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff0258d050 a2=70 a3=0 items=0 ppid=3074 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.964000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:13:46.964000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.964000 audit[3215]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fff0258d090 a2=70 a3=0 items=0 ppid=3074 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.964000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.965000 audit: BPF prog-id=145 op=LOAD Oct 2 19:13:46.965000 audit[3215]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff0258cfb0 a2=70 a3=ffffffff items=0 ppid=3074 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.965000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:13:46.968000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.968000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffd3354170 a2=70 a3=208 items=0 ppid=3074 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.968000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:13:46.968000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:46.968000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffd3354040 a2=70 a3=3 items=0 ppid=3074 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:46.968000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:13:46.975000 audit: BPF prog-id=145 op=UNLOAD Oct 2 19:13:47.052000 audit[3246]: NETFILTER_CFG table=raw:99 family=2 entries=19 op=nft_register_chain pid=3246 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:13:47.052000 audit[3246]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffef19eab30 a2=0 a3=7ffef19eab1c items=0 ppid=3074 pid=3246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.052000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:13:47.053000 audit[3247]: NETFILTER_CFG table=mangle:100 family=2 entries=19 op=nft_register_chain pid=3247 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:13:47.053000 audit[3247]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffdf7ebaf20 a2=0 a3=564803e54000 items=0 ppid=3074 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.053000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:13:47.056000 audit[3248]: NETFILTER_CFG table=nat:101 family=2 entries=16 op=nft_register_chain pid=3248 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:13:47.056000 audit[3248]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffe9c203d20 a2=0 a3=55f28d4ad000 items=0 ppid=3074 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.056000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:13:47.062000 audit[3251]: NETFILTER_CFG table=filter:102 family=2 entries=39 op=nft_register_chain pid=3251 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:13:47.062000 audit[3251]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7ffd2db46be0 a2=0 a3=7ffd2db46bcc items=0 ppid=3074 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.062000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:13:47.348950 kubelet[1992]: I1002 19:13:47.348836 1992 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:47.348950 kubelet[1992]: I1002 19:13:47.348881 1992 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:47.422669 kubelet[1992]: I1002 19:13:47.422604 1992 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:13:47.436959 kubelet[1992]: I1002 19:13:47.436932 1992 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:47.437099 kubelet[1992]: I1002 19:13:47.437083 1992 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/coredns-5d78c9869d-nq92d kube-system/coredns-5d78c9869d-9vvmg calico-system/calico-kube-controllers-7bd445fdb4-pr92n calico-system/csi-node-driver-ps8zf tigera-operator/tigera-operator-59c686f986-65n6r calico-system/calico-typha-6894746b66-v5gdt calico-system/calico-node-f8vfp kube-system/kube-controller-manager-localhost kube-system/kube-proxy-bsdrc kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:13:47.437176 kubelet[1992]: E1002 19:13:47.437118 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-nq92d" Oct 2 19:13:47.437176 kubelet[1992]: E1002 19:13:47.437131 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-9vvmg" Oct 2 19:13:47.437176 kubelet[1992]: E1002 19:13:47.437141 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" Oct 2 19:13:47.437176 kubelet[1992]: E1002 19:13:47.437151 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:47.437806 env[1108]: time="2023-10-02T19:13:47.437746279Z" level=info msg="StopContainer for \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\" with timeout 30 (s)" Oct 2 19:13:47.438278 env[1108]: time="2023-10-02T19:13:47.438245400Z" level=info msg="Stop container \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\" with signal terminated" Oct 2 19:13:47.471863 systemd[1]: cri-containerd-2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc.scope: Deactivated successfully. Oct 2 19:13:47.472195 systemd[1]: cri-containerd-2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc.scope: Consumed 1.106s CPU time. Oct 2 19:13:47.470000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:13:47.475000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:13:47.491179 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc-rootfs.mount: Deactivated successfully. Oct 2 19:13:47.722736 systemd[1]: Started sshd@9-10.0.0.71:22-10.0.0.1:59536.service. Oct 2 19:13:47.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.71:22-10.0.0.1:59536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.084617 env[1108]: time="2023-10-02T19:13:48.083046415Z" level=info msg="shim disconnected" id=2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc Oct 2 19:13:48.084617 env[1108]: time="2023-10-02T19:13:48.083120476Z" level=warning msg="cleaning up after shim disconnected" id=2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc namespace=k8s.io Oct 2 19:13:48.084617 env[1108]: time="2023-10-02T19:13:48.083135837Z" level=info msg="cleaning up dead shim" Oct 2 19:13:48.085228 systemd-networkd[1007]: vxlan.calico: Link UP Oct 2 19:13:48.085237 systemd-networkd[1007]: vxlan.calico: Gained carrier Oct 2 19:13:48.099837 env[1108]: time="2023-10-02T19:13:48.099784906Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:13:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3277 runtime=io.containerd.runc.v2\n" Oct 2 19:13:48.256000 audit[3275]: USER_ACCT pid=3275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.258321 sshd[3275]: Accepted publickey for core from 10.0.0.1 port 59536 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:48.258000 audit[3275]: CRED_ACQ pid=3275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.258000 audit[3275]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe43b9560 a2=3 a3=0 items=0 ppid=1 pid=3275 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.258000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:48.260314 sshd[3275]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:48.264534 systemd-logind[1096]: New session 10 of user core. Oct 2 19:13:48.265716 systemd[1]: Started session-10.scope. Oct 2 19:13:48.268000 audit[3275]: USER_START pid=3275 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.269000 audit[3302]: CRED_ACQ pid=3302 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.354908 env[1108]: time="2023-10-02T19:13:48.354780155Z" level=info msg="StopContainer for \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\" returns successfully" Oct 2 19:13:48.355737 env[1108]: time="2023-10-02T19:13:48.355604495Z" level=info msg="StopPodSandbox for \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\"" Oct 2 19:13:48.355737 env[1108]: time="2023-10-02T19:13:48.355682303Z" level=info msg="Container to stop \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:13:48.356619 kubelet[1992]: I1002 19:13:48.356596 1992 scope.go:115] "RemoveContainer" containerID="2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc" Oct 2 19:13:48.357510 env[1108]: time="2023-10-02T19:13:48.357485396Z" level=info msg="RemoveContainer for \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\"" Oct 2 19:13:48.357626 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba-shm.mount: Deactivated successfully. Oct 2 19:13:48.366113 systemd[1]: cri-containerd-df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba.scope: Deactivated successfully. Oct 2 19:13:48.365000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:13:48.370000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:13:48.384646 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba-rootfs.mount: Deactivated successfully. Oct 2 19:13:48.569644 env[1108]: time="2023-10-02T19:13:48.569523888Z" level=info msg="RemoveContainer for \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\" returns successfully" Oct 2 19:13:48.575153 sshd[3275]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:48.575000 audit[3275]: USER_END pid=3275 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.575000 audit[3275]: CRED_DISP pid=3275 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.578178 env[1108]: time="2023-10-02T19:13:48.578136486Z" level=info msg="shim disconnected" id=df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba Oct 2 19:13:48.578306 env[1108]: time="2023-10-02T19:13:48.578180384Z" level=warning msg="cleaning up after shim disconnected" id=df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba namespace=k8s.io Oct 2 19:13:48.578306 env[1108]: time="2023-10-02T19:13:48.578188882Z" level=info msg="cleaning up dead shim" Oct 2 19:13:48.578724 systemd[1]: sshd@9-10.0.0.71:22-10.0.0.1:59536.service: Deactivated successfully. Oct 2 19:13:48.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.71:22-10.0.0.1:59536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.580584 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:13:48.581537 systemd-logind[1096]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:13:48.583200 systemd[1]: Started sshd@10-10.0.0.71:22-10.0.0.1:59544.service. Oct 2 19:13:48.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.71:22-10.0.0.1:59544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.584326 systemd-logind[1096]: Removed session 10. Oct 2 19:13:48.585750 env[1108]: time="2023-10-02T19:13:48.585701843Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:13:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3355 runtime=io.containerd.runc.v2\n" Oct 2 19:13:48.586064 env[1108]: time="2023-10-02T19:13:48.586025629Z" level=info msg="TearDown network for sandbox \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\" successfully" Oct 2 19:13:48.586064 env[1108]: time="2023-10-02T19:13:48.586054647Z" level=info msg="StopPodSandbox for \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\" returns successfully" Oct 2 19:13:48.589944 kubelet[1992]: I1002 19:13:48.589919 1992 eviction_manager.go:596] "Eviction manager: pod is evicted successfully" pod="tigera-operator/tigera-operator-59c686f986-65n6r" Oct 2 19:13:48.590058 kubelet[1992]: I1002 19:13:48.589952 1992 eviction_manager.go:205] "Eviction manager: pods evicted, waiting for pod to be cleaned up" pods=[tigera-operator/tigera-operator-59c686f986-65n6r] Oct 2 19:13:48.598833 kubelet[1992]: I1002 19:13:48.598693 1992 scope.go:115] "RemoveContainer" containerID="2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc" Oct 2 19:13:48.599455 env[1108]: time="2023-10-02T19:13:48.599341806Z" level=error msg="ContainerStatus for \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\": not found" Oct 2 19:13:48.599638 kubelet[1992]: E1002 19:13:48.599607 1992 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\": not found" containerID="2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc" Oct 2 19:13:48.599638 kubelet[1992]: I1002 19:13:48.599643 1992 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc} err="failed to get container status \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\": rpc error: code = NotFound desc = an error occurred when try to find container \"2d32d121ddd424f18689dcb8a843d540f6be6609cb47fa7eea68b6ca878d2fdc\": not found" Oct 2 19:13:48.612554 kubelet[1992]: I1002 19:13:48.612397 1992 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b7be0c6b-4be3-4de3-b923-16d6d08b6203-var-lib-calico\") pod \"b7be0c6b-4be3-4de3-b923-16d6d08b6203\" (UID: \"b7be0c6b-4be3-4de3-b923-16d6d08b6203\") " Oct 2 19:13:48.612554 kubelet[1992]: I1002 19:13:48.612507 1992 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-mm2hq\" (UniqueName: \"kubernetes.io/projected/b7be0c6b-4be3-4de3-b923-16d6d08b6203-kube-api-access-mm2hq\") pod \"b7be0c6b-4be3-4de3-b923-16d6d08b6203\" (UID: \"b7be0c6b-4be3-4de3-b923-16d6d08b6203\") " Oct 2 19:13:48.613253 kubelet[1992]: I1002 19:13:48.612989 1992 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b7be0c6b-4be3-4de3-b923-16d6d08b6203-var-lib-calico" (OuterVolumeSpecName: "var-lib-calico") pod "b7be0c6b-4be3-4de3-b923-16d6d08b6203" (UID: "b7be0c6b-4be3-4de3-b923-16d6d08b6203"). InnerVolumeSpecName "var-lib-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:48.618066 systemd[1]: var-lib-kubelet-pods-b7be0c6b\x2d4be3\x2d4de3\x2db923\x2d16d6d08b6203-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmm2hq.mount: Deactivated successfully. Oct 2 19:13:48.619977 kubelet[1992]: I1002 19:13:48.618987 1992 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b7be0c6b-4be3-4de3-b923-16d6d08b6203-kube-api-access-mm2hq" (OuterVolumeSpecName: "kube-api-access-mm2hq") pod "b7be0c6b-4be3-4de3-b923-16d6d08b6203" (UID: "b7be0c6b-4be3-4de3-b923-16d6d08b6203"). InnerVolumeSpecName "kube-api-access-mm2hq". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:13:48.623000 audit[3368]: USER_ACCT pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.624955 sshd[3368]: Accepted publickey for core from 10.0.0.1 port 59544 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:48.624000 audit[3368]: CRED_ACQ pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.624000 audit[3368]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4b3caa50 a2=3 a3=0 items=0 ppid=1 pid=3368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.624000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:48.626542 sshd[3368]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:48.632483 systemd-logind[1096]: New session 11 of user core. Oct 2 19:13:48.633633 systemd[1]: Started session-11.scope. Oct 2 19:13:48.637000 audit[3368]: USER_START pid=3368 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.639000 audit[3371]: CRED_ACQ pid=3371 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:48.713739 kubelet[1992]: I1002 19:13:48.713683 1992 reconciler_common.go:300] "Volume detached for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b7be0c6b-4be3-4de3-b923-16d6d08b6203-var-lib-calico\") on node \"localhost\" DevicePath \"\"" Oct 2 19:13:48.713739 kubelet[1992]: I1002 19:13:48.713738 1992 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-mm2hq\" (UniqueName: \"kubernetes.io/projected/b7be0c6b-4be3-4de3-b923-16d6d08b6203-kube-api-access-mm2hq\") on node \"localhost\" DevicePath \"\"" Oct 2 19:13:49.005074 systemd[1]: Removed slice kubepods-besteffort-podb7be0c6b_4be3_4de3_b923_16d6d08b6203.slice. Oct 2 19:13:49.005184 systemd[1]: kubepods-besteffort-podb7be0c6b_4be3_4de3_b923_16d6d08b6203.slice: Consumed 1.132s CPU time. Oct 2 19:13:49.440370 sshd[3368]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:49.440000 audit[3368]: USER_END pid=3368 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.442551 kernel: kauditd_printk_skb: 174 callbacks suppressed Oct 2 19:13:49.442619 kernel: audit: type=1106 audit(1696274029.440:1176): pid=3368 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.446396 systemd[1]: Started sshd@11-10.0.0.71:22-10.0.0.1:59550.service. Oct 2 19:13:49.440000 audit[3368]: CRED_DISP pid=3368 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.448596 systemd[1]: sshd@10-10.0.0.71:22-10.0.0.1:59544.service: Deactivated successfully. Oct 2 19:13:49.449639 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:13:49.451057 systemd-logind[1096]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:13:49.452038 systemd-logind[1096]: Removed session 11. Oct 2 19:13:49.452157 kernel: audit: type=1104 audit(1696274029.440:1177): pid=3368 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.71:22-10.0.0.1:59550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:49.457465 kernel: audit: type=1130 audit(1696274029.443:1178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.71:22-10.0.0.1:59550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:49.457535 kernel: audit: type=1131 audit(1696274029.446:1179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.71:22-10.0.0.1:59544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:49.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.71:22-10.0.0.1:59544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:49.500000 audit[3411]: USER_ACCT pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.502145 sshd[3411]: Accepted publickey for core from 10.0.0.1 port 59550 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:49.504534 sshd[3411]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:49.502000 audit[3411]: CRED_ACQ pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.507411 kernel: audit: type=1101 audit(1696274029.500:1180): pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.507473 kernel: audit: type=1103 audit(1696274029.502:1181): pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.507496 kernel: audit: type=1006 audit(1696274029.503:1182): pid=3411 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:13:49.508418 systemd-logind[1096]: New session 12 of user core. Oct 2 19:13:49.509405 systemd[1]: Started session-12.scope. Oct 2 19:13:49.503000 audit[3411]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe3dd4800 a2=3 a3=0 items=0 ppid=1 pid=3411 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.512081 kernel: audit: type=1300 audit(1696274029.503:1182): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe3dd4800 a2=3 a3=0 items=0 ppid=1 pid=3411 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.512204 kernel: audit: type=1327 audit(1696274029.503:1182): proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:49.503000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:49.514000 audit[3411]: USER_START pid=3411 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.518308 kernel: audit: type=1105 audit(1696274029.514:1183): pid=3411 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.515000 audit[3414]: CRED_ACQ pid=3414 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.590593 kubelet[1992]: I1002 19:13:49.590532 1992 eviction_manager.go:427] "Eviction manager: pods successfully cleaned up" pods=[tigera-operator/tigera-operator-59c686f986-65n6r] Oct 2 19:13:49.605023 kubelet[1992]: I1002 19:13:49.604984 1992 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:49.605023 kubelet[1992]: I1002 19:13:49.605034 1992 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:49.607099 env[1108]: time="2023-10-02T19:13:49.607053865Z" level=info msg="StopPodSandbox for \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\"" Oct 2 19:13:49.607410 env[1108]: time="2023-10-02T19:13:49.607164769Z" level=info msg="TearDown network for sandbox \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\" successfully" Oct 2 19:13:49.607410 env[1108]: time="2023-10-02T19:13:49.607205561Z" level=info msg="StopPodSandbox for \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\" returns successfully" Oct 2 19:13:49.607687 env[1108]: time="2023-10-02T19:13:49.607642216Z" level=info msg="RemovePodSandbox for \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\"" Oct 2 19:13:49.609068 env[1108]: time="2023-10-02T19:13:49.607686555Z" level=info msg="Forcibly stopping sandbox \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\"" Oct 2 19:13:49.609068 env[1108]: time="2023-10-02T19:13:49.607753952Z" level=info msg="TearDown network for sandbox \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\" successfully" Oct 2 19:13:49.873553 sshd[3411]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:49.873000 audit[3411]: USER_END pid=3411 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.873000 audit[3411]: CRED_DISP pid=3411 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:49.876601 systemd[1]: sshd@11-10.0.0.71:22-10.0.0.1:59550.service: Deactivated successfully. Oct 2 19:13:49.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.71:22-10.0.0.1:59550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:49.877655 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:13:49.878275 systemd-logind[1096]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:13:49.878942 systemd-logind[1096]: Removed session 12. Oct 2 19:13:49.885345 systemd-networkd[1007]: vxlan.calico: Gained IPv6LL Oct 2 19:13:49.946579 env[1108]: time="2023-10-02T19:13:49.946521174Z" level=info msg="RemovePodSandbox \"df22aa460bd41dd28bf663c6e11625954ca6f9e343f5c05e44aadbd1e7dea8ba\" returns successfully" Oct 2 19:13:49.947308 kubelet[1992]: I1002 19:13:49.947279 1992 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:13:49.958010 kubelet[1992]: I1002 19:13:49.957973 1992 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:49.958113 kubelet[1992]: I1002 19:13:49.958071 1992 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/coredns-5d78c9869d-9vvmg calico-system/calico-kube-controllers-7bd445fdb4-pr92n kube-system/coredns-5d78c9869d-nq92d calico-system/csi-node-driver-ps8zf calico-system/calico-typha-6894746b66-v5gdt calico-system/calico-node-f8vfp kube-system/kube-controller-manager-localhost kube-system/kube-proxy-bsdrc kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:13:49.958113 kubelet[1992]: E1002 19:13:49.958094 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-9vvmg" Oct 2 19:13:49.958113 kubelet[1992]: E1002 19:13:49.958102 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" Oct 2 19:13:49.958113 kubelet[1992]: E1002 19:13:49.958110 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-nq92d" Oct 2 19:13:49.958242 kubelet[1992]: E1002 19:13:49.958116 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:13:49.958242 kubelet[1992]: E1002 19:13:49.958126 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-6894746b66-v5gdt" Oct 2 19:13:49.958242 kubelet[1992]: E1002 19:13:49.958133 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-f8vfp" Oct 2 19:13:49.958242 kubelet[1992]: E1002 19:13:49.958142 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:13:49.958242 kubelet[1992]: E1002 19:13:49.958149 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-bsdrc" Oct 2 19:13:49.958242 kubelet[1992]: E1002 19:13:49.958156 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:13:49.958242 kubelet[1992]: E1002 19:13:49.958163 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:13:49.958242 kubelet[1992]: I1002 19:13:49.958173 1992 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:13:50.999718 env[1108]: time="2023-10-02T19:13:50.999669089Z" level=info msg="StopPodSandbox for \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\"" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.050 [INFO][3442] k8s.go 576: Cleaning up netns ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.050 [INFO][3442] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" iface="eth0" netns="/var/run/netns/cni-69d7e436-e0fe-13ea-b090-cd6da285cdfa" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.051 [INFO][3442] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" iface="eth0" netns="/var/run/netns/cni-69d7e436-e0fe-13ea-b090-cd6da285cdfa" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.051 [INFO][3442] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" iface="eth0" netns="/var/run/netns/cni-69d7e436-e0fe-13ea-b090-cd6da285cdfa" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.051 [INFO][3442] k8s.go 583: Releasing IP address(es) ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.051 [INFO][3442] utils.go 196: Calico CNI releasing IP address ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.097 [INFO][3450] ipam_plugin.go 416: Releasing address using handleID ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" HandleID="k8s-pod-network.9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:51.111358 env[1108]: time="2023-10-02T19:13:51Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:51.111358 env[1108]: time="2023-10-02T19:13:51Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.107 [WARNING][3450] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" HandleID="k8s-pod-network.9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.107 [INFO][3450] ipam_plugin.go 444: Releasing address using workloadID ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" HandleID="k8s-pod-network.9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:51.111358 env[1108]: time="2023-10-02T19:13:51Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:51.111358 env[1108]: 2023-10-02 19:13:51.110 [INFO][3442] k8s.go 589: Teardown processing complete. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:51.112065 env[1108]: time="2023-10-02T19:13:51.112022960Z" level=info msg="TearDown network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\" successfully" Oct 2 19:13:51.112142 env[1108]: time="2023-10-02T19:13:51.112065245Z" level=info msg="StopPodSandbox for \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\" returns successfully" Oct 2 19:13:51.113655 systemd[1]: run-netns-cni\x2d69d7e436\x2de0fe\x2d13ea\x2db090\x2dcd6da285cdfa.mount: Deactivated successfully. Oct 2 19:13:51.113939 kubelet[1992]: E1002 19:13:51.113910 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:51.114645 env[1108]: time="2023-10-02T19:13:51.114604890Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-9vvmg,Uid:8a6273e5-22a9-4367-900d-d3c050deb6b1,Namespace:kube-system,Attempt:1,}" Oct 2 19:13:51.857416 env[1108]: time="2023-10-02T19:13:51.857335921Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:51.860030 env[1108]: time="2023-10-02T19:13:51.859982733Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:51.864435 env[1108]: time="2023-10-02T19:13:51.864367058Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:51.866563 env[1108]: time="2023-10-02T19:13:51.866491904Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:51.968245 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:13:51.968401 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali927f3c9b1c6: link becomes ready Oct 2 19:13:51.983045 systemd-networkd[1007]: cali927f3c9b1c6: Link UP Oct 2 19:13:51.983053 systemd-networkd[1007]: cali927f3c9b1c6: Gained carrier Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.910 [INFO][3466] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5d78c9869d--9vvmg-eth0 coredns-5d78c9869d- kube-system 8a6273e5-22a9-4367-900d-d3c050deb6b1 802 0 2023-10-02 19:13:11 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5d78c9869d-9vvmg eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali927f3c9b1c6 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Namespace="kube-system" Pod="coredns-5d78c9869d-9vvmg" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--9vvmg-" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.910 [INFO][3466] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Namespace="kube-system" Pod="coredns-5d78c9869d-9vvmg" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.933 [INFO][3479] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" HandleID="k8s-pod-network.bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.942 [INFO][3479] ipam_plugin.go 269: Auto assigning IP ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" HandleID="k8s-pod-network.bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0000b4000), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5d78c9869d-9vvmg", "timestamp":"2023-10-02 19:13:51.933930639 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:13:51.997877 env[1108]: time="2023-10-02T19:13:51Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:51.997877 env[1108]: time="2023-10-02T19:13:51Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.943 [INFO][3479] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.944 [INFO][3479] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" host="localhost" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.948 [INFO][3479] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.952 [INFO][3479] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.953 [INFO][3479] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.955 [INFO][3479] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.955 [INFO][3479] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" host="localhost" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.956 [INFO][3479] ipam.go 1682: Creating new handle: k8s-pod-network.bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.959 [INFO][3479] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" host="localhost" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.963 [INFO][3479] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" host="localhost" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.963 [INFO][3479] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" host="localhost" Oct 2 19:13:51.997877 env[1108]: time="2023-10-02T19:13:51Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:51.997877 env[1108]: 2023-10-02 19:13:51.964 [INFO][3479] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" HandleID="k8s-pod-network.bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:51.998706 env[1108]: 2023-10-02 19:13:51.965 [INFO][3466] k8s.go 383: Populated endpoint ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Namespace="kube-system" Pod="coredns-5d78c9869d-9vvmg" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--9vvmg-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"8a6273e5-22a9-4367-900d-d3c050deb6b1", ResourceVersion:"802", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5d78c9869d-9vvmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali927f3c9b1c6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:51.998706 env[1108]: 2023-10-02 19:13:51.966 [INFO][3466] k8s.go 384: Calico CNI using IPs: [192.168.88.129/32] ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Namespace="kube-system" Pod="coredns-5d78c9869d-9vvmg" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:51.998706 env[1108]: 2023-10-02 19:13:51.966 [INFO][3466] dataplane_linux.go 68: Setting the host side veth name to cali927f3c9b1c6 ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Namespace="kube-system" Pod="coredns-5d78c9869d-9vvmg" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:51.998706 env[1108]: 2023-10-02 19:13:51.968 [INFO][3466] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Namespace="kube-system" Pod="coredns-5d78c9869d-9vvmg" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:51.998706 env[1108]: 2023-10-02 19:13:51.983 [INFO][3466] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Namespace="kube-system" Pod="coredns-5d78c9869d-9vvmg" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--9vvmg-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"8a6273e5-22a9-4367-900d-d3c050deb6b1", ResourceVersion:"802", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab", Pod:"coredns-5d78c9869d-9vvmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali927f3c9b1c6", MAC:"6e:04:8e:59:36:8c", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:51.998706 env[1108]: 2023-10-02 19:13:51.991 [INFO][3466] k8s.go 489: Wrote updated endpoint to datastore ContainerID="bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab" Namespace="kube-system" Pod="coredns-5d78c9869d-9vvmg" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:52.001094 env[1108]: time="2023-10-02T19:13:52.001052825Z" level=info msg="StopPodSandbox for \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\"" Oct 2 19:13:52.002616 env[1108]: time="2023-10-02T19:13:52.001528186Z" level=info msg="StopPodSandbox for \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\"" Oct 2 19:13:52.002745 env[1108]: time="2023-10-02T19:13:52.001531422Z" level=info msg="StopPodSandbox for \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\"" Oct 2 19:13:52.011000 audit[3525]: NETFILTER_CFG table=filter:103 family=2 entries=36 op=nft_register_chain pid=3525 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:13:52.011000 audit[3525]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffcc21db610 a2=0 a3=7ffcc21db5fc items=0 ppid=3074 pid=3525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.011000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:13:52.019997 env[1108]: time="2023-10-02T19:13:52.019911223Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:13:52.019997 env[1108]: time="2023-10-02T19:13:52.019952678Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:13:52.019997 env[1108]: time="2023-10-02T19:13:52.019964040Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:13:52.020355 env[1108]: time="2023-10-02T19:13:52.020069855Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab pid=3558 runtime=io.containerd.runc.v2 Oct 2 19:13:52.052857 systemd[1]: Started cri-containerd-bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab.scope. Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.074000 audit: BPF prog-id=146 op=LOAD Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3558 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266323464333465353931346236663337326164373165343166323132 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3558 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266323464333465353931346236663337326164373165343166323132 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit: BPF prog-id=147 op=LOAD Oct 2 19:13:52.075000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002d9b30 items=0 ppid=3558 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266323464333465353931346236663337326164373165343166323132 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit: BPF prog-id=148 op=LOAD Oct 2 19:13:52.075000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002d9b78 items=0 ppid=3558 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266323464333465353931346236663337326164373165343166323132 Oct 2 19:13:52.075000 audit: BPF prog-id=148 op=UNLOAD Oct 2 19:13:52.075000 audit: BPF prog-id=147 op=UNLOAD Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.075000 audit: BPF prog-id=149 op=LOAD Oct 2 19:13:52.075000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002d9f88 items=0 ppid=3558 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266323464333465353931346236663337326164373165343166323132 Oct 2 19:13:52.077925 systemd-resolved[1057]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:13:52.130839 env[1108]: time="2023-10-02T19:13:52.126039723Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-9vvmg,Uid:8a6273e5-22a9-4367-900d-d3c050deb6b1,Namespace:kube-system,Attempt:1,} returns sandbox id \"bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab\"" Oct 2 19:13:52.130839 env[1108]: time="2023-10-02T19:13:52.127664706Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:13:52.131143 kubelet[1992]: E1002 19:13:52.127005 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.095 [INFO][3556] k8s.go 576: Cleaning up netns ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.095 [INFO][3556] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" iface="eth0" netns="/var/run/netns/cni-e7b94cfb-60ad-b825-facd-59575af4b82d" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.095 [INFO][3556] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" iface="eth0" netns="/var/run/netns/cni-e7b94cfb-60ad-b825-facd-59575af4b82d" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.097 [INFO][3556] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" iface="eth0" netns="/var/run/netns/cni-e7b94cfb-60ad-b825-facd-59575af4b82d" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.097 [INFO][3556] k8s.go 583: Releasing IP address(es) ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.097 [INFO][3556] utils.go 196: Calico CNI releasing IP address ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.124 [INFO][3613] ipam_plugin.go 416: Releasing address using handleID ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" HandleID="k8s-pod-network.a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.142577 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:52.142577 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.136 [WARNING][3613] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" HandleID="k8s-pod-network.a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.136 [INFO][3613] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" HandleID="k8s-pod-network.a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.142577 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:52.142577 env[1108]: 2023-10-02 19:13:52.141 [INFO][3556] k8s.go 589: Teardown processing complete. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:52.143359 env[1108]: time="2023-10-02T19:13:52.143318209Z" level=info msg="TearDown network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\" successfully" Oct 2 19:13:52.143471 env[1108]: time="2023-10-02T19:13:52.143443622Z" level=info msg="StopPodSandbox for \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\" returns successfully" Oct 2 19:13:52.144800 systemd[1]: run-netns-cni\x2de7b94cfb\x2d60ad\x2db825\x2dfacd\x2d59575af4b82d.mount: Deactivated successfully. Oct 2 19:13:52.145119 env[1108]: time="2023-10-02T19:13:52.145095560Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bd445fdb4-pr92n,Uid:f589a762-5083-4073-a423-7886fa817b69,Namespace:calico-system,Attempt:1,}" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.078 [INFO][3580] k8s.go 576: Cleaning up netns ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.078 [INFO][3580] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" iface="eth0" netns="/var/run/netns/cni-ed4d71ed-82bd-0f1c-eff9-2c683f8252e5" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.078 [INFO][3580] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" iface="eth0" netns="/var/run/netns/cni-ed4d71ed-82bd-0f1c-eff9-2c683f8252e5" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.079 [INFO][3580] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" iface="eth0" netns="/var/run/netns/cni-ed4d71ed-82bd-0f1c-eff9-2c683f8252e5" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.079 [INFO][3580] k8s.go 583: Releasing IP address(es) ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.079 [INFO][3580] utils.go 196: Calico CNI releasing IP address ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.124 [INFO][3606] ipam_plugin.go 416: Releasing address using handleID ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" HandleID="k8s-pod-network.0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.153242 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:52.153242 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.149 [WARNING][3606] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" HandleID="k8s-pod-network.0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.149 [INFO][3606] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" HandleID="k8s-pod-network.0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.153242 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:52.153242 env[1108]: 2023-10-02 19:13:52.152 [INFO][3580] k8s.go 589: Teardown processing complete. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:52.154760 systemd[1]: run-netns-cni\x2ded4d71ed\x2d82bd\x2d0f1c\x2deff9\x2d2c683f8252e5.mount: Deactivated successfully. Oct 2 19:13:52.155125 env[1108]: time="2023-10-02T19:13:52.155073272Z" level=info msg="TearDown network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\" successfully" Oct 2 19:13:52.155125 env[1108]: time="2023-10-02T19:13:52.155113494Z" level=info msg="StopPodSandbox for \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\" returns successfully" Oct 2 19:13:52.156238 env[1108]: time="2023-10-02T19:13:52.156073664Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-ps8zf,Uid:ebe01108-b16f-455c-a06f-e81b35aae910,Namespace:calico-system,Attempt:1,}" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.100 [INFO][3559] k8s.go 576: Cleaning up netns ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.100 [INFO][3559] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" iface="eth0" netns="/var/run/netns/cni-fb1b9739-e9d0-9785-6b9b-96ceb06afe21" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.100 [INFO][3559] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" iface="eth0" netns="/var/run/netns/cni-fb1b9739-e9d0-9785-6b9b-96ceb06afe21" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.100 [INFO][3559] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" iface="eth0" netns="/var/run/netns/cni-fb1b9739-e9d0-9785-6b9b-96ceb06afe21" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.100 [INFO][3559] k8s.go 583: Releasing IP address(es) ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.100 [INFO][3559] utils.go 196: Calico CNI releasing IP address ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.141 [INFO][3619] ipam_plugin.go 416: Releasing address using handleID ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" HandleID="k8s-pod-network.f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.169670 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:52.169670 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.162 [WARNING][3619] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" HandleID="k8s-pod-network.f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.162 [INFO][3619] ipam_plugin.go 444: Releasing address using workloadID ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" HandleID="k8s-pod-network.f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.169670 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:52.169670 env[1108]: 2023-10-02 19:13:52.167 [INFO][3559] k8s.go 589: Teardown processing complete. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:52.169670 env[1108]: time="2023-10-02T19:13:52.168926396Z" level=info msg="TearDown network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\" successfully" Oct 2 19:13:52.169670 env[1108]: time="2023-10-02T19:13:52.168958121Z" level=info msg="StopPodSandbox for \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\" returns successfully" Oct 2 19:13:52.170130 kubelet[1992]: E1002 19:13:52.169351 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:52.171015 env[1108]: time="2023-10-02T19:13:52.170976017Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-nq92d,Uid:0af74e32-824b-4dfe-b295-a3e3c69aff70,Namespace:kube-system,Attempt:1,}" Oct 2 19:13:52.300257 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali19fad530ea5: link becomes ready Oct 2 19:13:52.314227 systemd-networkd[1007]: cali19fad530ea5: Link UP Oct 2 19:13:52.314238 systemd-networkd[1007]: cali19fad530ea5: Gained carrier Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.203 [INFO][3636] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0 calico-kube-controllers-7bd445fdb4- calico-system f589a762-5083-4073-a423-7886fa817b69 813 0 2023-10-02 19:13:18 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7bd445fdb4 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7bd445fdb4-pr92n eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali19fad530ea5 [] []}} ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-pr92n" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.203 [INFO][3636] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-pr92n" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.241 [INFO][3675] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" HandleID="k8s-pod-network.132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.250 [INFO][3675] ipam_plugin.go 269: Auto assigning IP ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" HandleID="k8s-pod-network.132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002a6350), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7bd445fdb4-pr92n", "timestamp":"2023-10-02 19:13:52.241517234 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:13:52.325862 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:52.325862 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.251 [INFO][3675] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.253 [INFO][3675] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" host="localhost" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.257 [INFO][3675] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.260 [INFO][3675] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.264 [INFO][3675] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.267 [INFO][3675] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.267 [INFO][3675] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" host="localhost" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.269 [INFO][3675] ipam.go 1682: Creating new handle: k8s-pod-network.132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8 Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.273 [INFO][3675] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" host="localhost" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.279 [INFO][3675] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" host="localhost" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.279 [INFO][3675] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" host="localhost" Oct 2 19:13:52.325862 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:52.325862 env[1108]: 2023-10-02 19:13:52.279 [INFO][3675] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" HandleID="k8s-pod-network.132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.326714 env[1108]: 2023-10-02 19:13:52.297 [INFO][3636] k8s.go 383: Populated endpoint ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-pr92n" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0", GenerateName:"calico-kube-controllers-7bd445fdb4-", Namespace:"calico-system", SelfLink:"", UID:"f589a762-5083-4073-a423-7886fa817b69", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bd445fdb4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7bd445fdb4-pr92n", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali19fad530ea5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:52.326714 env[1108]: 2023-10-02 19:13:52.297 [INFO][3636] k8s.go 384: Calico CNI using IPs: [192.168.88.130/32] ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-pr92n" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.326714 env[1108]: 2023-10-02 19:13:52.297 [INFO][3636] dataplane_linux.go 68: Setting the host side veth name to cali19fad530ea5 ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-pr92n" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.326714 env[1108]: 2023-10-02 19:13:52.300 [INFO][3636] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-pr92n" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.326714 env[1108]: 2023-10-02 19:13:52.314 [INFO][3636] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-pr92n" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0", GenerateName:"calico-kube-controllers-7bd445fdb4-", Namespace:"calico-system", SelfLink:"", UID:"f589a762-5083-4073-a423-7886fa817b69", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bd445fdb4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8", Pod:"calico-kube-controllers-7bd445fdb4-pr92n", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali19fad530ea5", MAC:"be:f4:ec:ee:78:35", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:52.326714 env[1108]: 2023-10-02 19:13:52.323 [INFO][3636] k8s.go 489: Wrote updated endpoint to datastore ContainerID="132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8" Namespace="calico-system" Pod="calico-kube-controllers-7bd445fdb4-pr92n" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:52.355963 env[1108]: time="2023-10-02T19:13:52.355794079Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:13:52.356157 env[1108]: time="2023-10-02T19:13:52.355935725Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:13:52.356157 env[1108]: time="2023-10-02T19:13:52.355955425Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:13:52.356157 env[1108]: time="2023-10-02T19:13:52.356112964Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8 pid=3722 runtime=io.containerd.runc.v2 Oct 2 19:13:52.359000 audit[3729]: NETFILTER_CFG table=filter:104 family=2 entries=40 op=nft_register_chain pid=3729 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:13:52.359000 audit[3729]: SYSCALL arch=c000003e syscall=46 success=yes exit=21096 a0=3 a1=7ffc96384a60 a2=0 a3=7ffc96384a4c items=0 ppid=3074 pid=3729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.359000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:13:52.369262 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic2111b3e785: link becomes ready Oct 2 19:13:52.372164 systemd[1]: Started cri-containerd-132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8.scope. Oct 2 19:13:52.381781 systemd-networkd[1007]: calic2111b3e785: Link UP Oct 2 19:13:52.381794 systemd-networkd[1007]: calic2111b3e785: Gained carrier Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.387000 audit: BPF prog-id=150 op=LOAD Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3722 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133326230316666336330356232303366383363386561313337376563 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3722 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133326230316666336330356232303366383363386561313337376563 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.388000 audit: BPF prog-id=151 op=LOAD Oct 2 19:13:52.388000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024920 items=0 ppid=3722 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133326230316666336330356232303366383363386561313337376563 Oct 2 19:13:52.390000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.390000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.390000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.390000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.390000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.390000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.390000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.390000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.232 [INFO][3649] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--ps8zf-eth0 csi-node-driver- calico-system ebe01108-b16f-455c-a06f-e81b35aae910 812 0 2023-10-02 19:13:36 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:759544bff5 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-ps8zf eth0 default [] [] [kns.calico-system ksa.calico-system.default] calic2111b3e785 [] []}} ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Namespace="calico-system" Pod="csi-node-driver-ps8zf" WorkloadEndpoint="localhost-k8s-csi--node--driver--ps8zf-" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.234 [INFO][3649] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Namespace="calico-system" Pod="csi-node-driver-ps8zf" WorkloadEndpoint="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.286 [INFO][3682] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" HandleID="k8s-pod-network.e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.301 [INFO][3682] ipam_plugin.go 269: Auto assigning IP ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" HandleID="k8s-pod-network.e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00018f120), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-ps8zf", "timestamp":"2023-10-02 19:13:52.286628603 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:13:52.394879 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:52.394879 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.309 [INFO][3682] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.312 [INFO][3682] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" host="localhost" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.321 [INFO][3682] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.337 [INFO][3682] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.341 [INFO][3682] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.345 [INFO][3682] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.346 [INFO][3682] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" host="localhost" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.349 [INFO][3682] ipam.go 1682: Creating new handle: k8s-pod-network.e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.354 [INFO][3682] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" host="localhost" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.361 [INFO][3682] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" host="localhost" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.361 [INFO][3682] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" host="localhost" Oct 2 19:13:52.394879 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:52.394879 env[1108]: 2023-10-02 19:13:52.361 [INFO][3682] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" HandleID="k8s-pod-network.e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.395692 env[1108]: 2023-10-02 19:13:52.365 [INFO][3649] k8s.go 383: Populated endpoint ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Namespace="calico-system" Pod="csi-node-driver-ps8zf" WorkloadEndpoint="localhost-k8s-csi--node--driver--ps8zf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--ps8zf-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ebe01108-b16f-455c-a06f-e81b35aae910", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-ps8zf", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calic2111b3e785", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:52.395692 env[1108]: 2023-10-02 19:13:52.365 [INFO][3649] k8s.go 384: Calico CNI using IPs: [192.168.88.131/32] ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Namespace="calico-system" Pod="csi-node-driver-ps8zf" WorkloadEndpoint="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.395692 env[1108]: 2023-10-02 19:13:52.365 [INFO][3649] dataplane_linux.go 68: Setting the host side veth name to calic2111b3e785 ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Namespace="calico-system" Pod="csi-node-driver-ps8zf" WorkloadEndpoint="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.395692 env[1108]: 2023-10-02 19:13:52.369 [INFO][3649] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Namespace="calico-system" Pod="csi-node-driver-ps8zf" WorkloadEndpoint="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.395692 env[1108]: 2023-10-02 19:13:52.382 [INFO][3649] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Namespace="calico-system" Pod="csi-node-driver-ps8zf" WorkloadEndpoint="localhost-k8s-csi--node--driver--ps8zf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--ps8zf-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ebe01108-b16f-455c-a06f-e81b35aae910", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e", Pod:"csi-node-driver-ps8zf", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calic2111b3e785", MAC:"12:87:71:8b:a7:72", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:52.395692 env[1108]: 2023-10-02 19:13:52.392 [INFO][3649] k8s.go 489: Wrote updated endpoint to datastore ContainerID="e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e" Namespace="calico-system" Pod="csi-node-driver-ps8zf" WorkloadEndpoint="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:52.390000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.390000 audit: BPF prog-id=152 op=LOAD Oct 2 19:13:52.390000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000024968 items=0 ppid=3722 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133326230316666336330356232303366383363386561313337376563 Oct 2 19:13:52.397000 audit: BPF prog-id=152 op=UNLOAD Oct 2 19:13:52.397000 audit: BPF prog-id=151 op=UNLOAD Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { perfmon } for pid=3732 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit[3732]: AVC avc: denied { bpf } for pid=3732 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.398000 audit: BPF prog-id=153 op=LOAD Oct 2 19:13:52.398000 audit[3732]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000024d78 items=0 ppid=3722 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133326230316666336330356232303366383363386561313337376563 Oct 2 19:13:52.402317 systemd-resolved[1057]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:13:52.416695 systemd-networkd[1007]: cali371ad098774: Link UP Oct 2 19:13:52.416704 systemd-networkd[1007]: cali371ad098774: Gained carrier Oct 2 19:13:52.429646 env[1108]: time="2023-10-02T19:13:52.429533447Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:13:52.429785 env[1108]: time="2023-10-02T19:13:52.429674232Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:13:52.429785 env[1108]: time="2023-10-02T19:13:52.429713141Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:13:52.430004 env[1108]: time="2023-10-02T19:13:52.429948366Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e pid=3772 runtime=io.containerd.runc.v2 Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.243 [INFO][3661] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5d78c9869d--nq92d-eth0 coredns-5d78c9869d- kube-system 0af74e32-824b-4dfe-b295-a3e3c69aff70 814 0 2023-10-02 19:13:11 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5d78c9869d-nq92d eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali371ad098774 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Namespace="kube-system" Pod="coredns-5d78c9869d-nq92d" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--nq92d-" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.243 [INFO][3661] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Namespace="kube-system" Pod="coredns-5d78c9869d-nq92d" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.310 [INFO][3688] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" HandleID="k8s-pod-network.183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.337 [INFO][3688] ipam_plugin.go 269: Auto assigning IP ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" HandleID="k8s-pod-network.183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00018efc0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5d78c9869d-nq92d", "timestamp":"2023-10-02 19:13:52.309431131 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:13:52.434686 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:52.434686 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.361 [INFO][3688] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.365 [INFO][3688] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" host="localhost" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.371 [INFO][3688] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.379 [INFO][3688] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.382 [INFO][3688] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.387 [INFO][3688] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.387 [INFO][3688] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" host="localhost" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.394 [INFO][3688] ipam.go 1682: Creating new handle: k8s-pod-network.183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.399 [INFO][3688] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" host="localhost" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.407 [INFO][3688] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" host="localhost" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.407 [INFO][3688] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" host="localhost" Oct 2 19:13:52.434686 env[1108]: time="2023-10-02T19:13:52Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:52.434686 env[1108]: 2023-10-02 19:13:52.407 [INFO][3688] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" HandleID="k8s-pod-network.183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.435300 env[1108]: 2023-10-02 19:13:52.409 [INFO][3661] k8s.go 383: Populated endpoint ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Namespace="kube-system" Pod="coredns-5d78c9869d-nq92d" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--nq92d-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"0af74e32-824b-4dfe-b295-a3e3c69aff70", ResourceVersion:"814", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5d78c9869d-nq92d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali371ad098774", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:52.435300 env[1108]: 2023-10-02 19:13:52.410 [INFO][3661] k8s.go 384: Calico CNI using IPs: [192.168.88.132/32] ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Namespace="kube-system" Pod="coredns-5d78c9869d-nq92d" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.435300 env[1108]: 2023-10-02 19:13:52.410 [INFO][3661] dataplane_linux.go 68: Setting the host side veth name to cali371ad098774 ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Namespace="kube-system" Pod="coredns-5d78c9869d-nq92d" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.435300 env[1108]: 2023-10-02 19:13:52.411 [INFO][3661] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Namespace="kube-system" Pod="coredns-5d78c9869d-nq92d" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.435300 env[1108]: 2023-10-02 19:13:52.417 [INFO][3661] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Namespace="kube-system" Pod="coredns-5d78c9869d-nq92d" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--nq92d-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"0af74e32-824b-4dfe-b295-a3e3c69aff70", ResourceVersion:"814", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee", Pod:"coredns-5d78c9869d-nq92d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali371ad098774", MAC:"4e:2c:15:69:e8:a1", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:52.435300 env[1108]: 2023-10-02 19:13:52.427 [INFO][3661] k8s.go 489: Wrote updated endpoint to datastore ContainerID="183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee" Namespace="kube-system" Pod="coredns-5d78c9869d-nq92d" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:52.437000 audit[3776]: NETFILTER_CFG table=filter:105 family=2 entries=38 op=nft_register_chain pid=3776 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:13:52.437000 audit[3776]: SYSCALL arch=c000003e syscall=46 success=yes exit=19508 a0=3 a1=7fff8a962aa0 a2=0 a3=7fff8a962a8c items=0 ppid=3074 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.437000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:13:52.453132 systemd[1]: Started cri-containerd-e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e.scope. Oct 2 19:13:52.456000 audit[3815]: NETFILTER_CFG table=filter:106 family=2 entries=38 op=nft_register_chain pid=3815 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:13:52.456000 audit[3815]: SYSCALL arch=c000003e syscall=46 success=yes exit=19088 a0=3 a1=7ffc0ffac910 a2=0 a3=7ffc0ffac8fc items=0 ppid=3074 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.456000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:13:52.459322 env[1108]: time="2023-10-02T19:13:52.459242743Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bd445fdb4-pr92n,Uid:f589a762-5083-4073-a423-7886fa817b69,Namespace:calico-system,Attempt:1,} returns sandbox id \"132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8\"" Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit: BPF prog-id=154 op=LOAD Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3772 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532666265393532323936373863663935373666646265373035303332 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3772 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532666265393532323936373863663935373666646265373035303332 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.467000 audit: BPF prog-id=155 op=LOAD Oct 2 19:13:52.467000 audit[3784]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00019c7d0 items=0 ppid=3772 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532666265393532323936373863663935373666646265373035303332 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit: BPF prog-id=156 op=LOAD Oct 2 19:13:52.468000 audit[3784]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00019c818 items=0 ppid=3772 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532666265393532323936373863663935373666646265373035303332 Oct 2 19:13:52.468000 audit: BPF prog-id=156 op=UNLOAD Oct 2 19:13:52.468000 audit: BPF prog-id=155 op=UNLOAD Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.468000 audit: BPF prog-id=157 op=LOAD Oct 2 19:13:52.468000 audit[3784]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00019cc28 items=0 ppid=3772 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532666265393532323936373863663935373666646265373035303332 Oct 2 19:13:52.470923 env[1108]: time="2023-10-02T19:13:52.468823323Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:13:52.470923 env[1108]: time="2023-10-02T19:13:52.468925930Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:13:52.470923 env[1108]: time="2023-10-02T19:13:52.468960640Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:13:52.470923 env[1108]: time="2023-10-02T19:13:52.469169332Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee pid=3828 runtime=io.containerd.runc.v2 Oct 2 19:13:52.470161 systemd-resolved[1057]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:13:52.487425 systemd[1]: Started cri-containerd-183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee.scope. Oct 2 19:13:52.488544 env[1108]: time="2023-10-02T19:13:52.488022790Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-ps8zf,Uid:ebe01108-b16f-455c-a06f-e81b35aae910,Namespace:calico-system,Attempt:1,} returns sandbox id \"e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e\"" Oct 2 19:13:52.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.503000 audit: BPF prog-id=158 op=LOAD Oct 2 19:13:52.503000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.503000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3828 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138336138656336363431316166653233636365313132313764306536 Oct 2 19:13:52.503000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.503000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3828 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138336138656336363431316166653233636365313132313764306536 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit: BPF prog-id=159 op=LOAD Oct 2 19:13:52.504000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a0b30 items=0 ppid=3828 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138336138656336363431316166653233636365313132313764306536 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit: BPF prog-id=160 op=LOAD Oct 2 19:13:52.504000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a0b78 items=0 ppid=3828 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138336138656336363431316166653233636365313132313764306536 Oct 2 19:13:52.504000 audit: BPF prog-id=160 op=UNLOAD Oct 2 19:13:52.504000 audit: BPF prog-id=159 op=UNLOAD Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:52.504000 audit: BPF prog-id=161 op=LOAD Oct 2 19:13:52.504000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a0f88 items=0 ppid=3828 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:52.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138336138656336363431316166653233636365313132313764306536 Oct 2 19:13:52.506543 systemd-resolved[1057]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:13:52.532562 env[1108]: time="2023-10-02T19:13:52.532503424Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-nq92d,Uid:0af74e32-824b-4dfe-b295-a3e3c69aff70,Namespace:kube-system,Attempt:1,} returns sandbox id \"183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee\"" Oct 2 19:13:52.533828 kubelet[1992]: E1002 19:13:52.533376 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:52.691000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:52.691000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000de8210 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:13:52.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:52.694000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:52.694000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0017cd400 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:13:52.694000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:53.148348 systemd[1]: run-netns-cni\x2dfb1b9739\x2de9d0\x2d9785\x2d6b9b\x2d96ceb06afe21.mount: Deactivated successfully. Oct 2 19:13:53.385000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:53.385000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:53.385000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:53.385000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c007a7e9c0 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:13:53.385000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5d a1=c00998a000 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:13:53.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:53.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:53.385000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c0072152c0 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:13:53.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:53.449000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:53.449000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5d a1=c00998a280 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:13:53.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:53.449000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6798 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:53.449000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5d a1=c007d641b0 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:13:53.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:53.449000 audit[1863]: AVC avc: denied { watch } for pid=1863 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6800 scontext=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:53.449000 audit[1863]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c0072152f0 a2=fc6 a3=0 items=0 ppid=1704 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c377,c572 key=(null) Oct 2 19:13:53.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:53.599327 systemd-networkd[1007]: cali19fad530ea5: Gained IPv6LL Oct 2 19:13:53.853465 systemd-networkd[1007]: cali371ad098774: Gained IPv6LL Oct 2 19:13:53.917578 systemd-networkd[1007]: cali927f3c9b1c6: Gained IPv6LL Oct 2 19:13:54.173503 systemd-networkd[1007]: calic2111b3e785: Gained IPv6LL Oct 2 19:13:54.187970 env[1108]: time="2023-10-02T19:13:54.187891428Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.220931 env[1108]: time="2023-10-02T19:13:54.220870046Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.231204 env[1108]: time="2023-10-02T19:13:54.231138278Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.233477 env[1108]: time="2023-10-02T19:13:54.233395417Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.233934 env[1108]: time="2023-10-02T19:13:54.233878369Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:13:54.235046 env[1108]: time="2023-10-02T19:13:54.235005121Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:13:54.235803 env[1108]: time="2023-10-02T19:13:54.235767282Z" level=info msg="CreateContainer within sandbox \"bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:13:54.256829 env[1108]: time="2023-10-02T19:13:54.256742740Z" level=info msg="CreateContainer within sandbox \"bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c299c4ee2e1ca38adae73f145fda4ac46923400bce12d5305e68fb8ad83d64b8\"" Oct 2 19:13:54.257513 env[1108]: time="2023-10-02T19:13:54.257483572Z" level=info msg="StartContainer for \"c299c4ee2e1ca38adae73f145fda4ac46923400bce12d5305e68fb8ad83d64b8\"" Oct 2 19:13:54.281230 systemd[1]: Started cri-containerd-c299c4ee2e1ca38adae73f145fda4ac46923400bce12d5305e68fb8ad83d64b8.scope. Oct 2 19:13:54.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit: BPF prog-id=162 op=LOAD Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3558 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:54.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332393963346565326531636133386164616537336631343566646134 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3558 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:54.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332393963346565326531636133386164616537336631343566646134 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.290000 audit: BPF prog-id=163 op=LOAD Oct 2 19:13:54.290000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00023fed0 items=0 ppid=3558 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:54.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332393963346565326531636133386164616537336631343566646134 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit: BPF prog-id=164 op=LOAD Oct 2 19:13:54.291000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00023ff18 items=0 ppid=3558 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:54.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332393963346565326531636133386164616537336631343566646134 Oct 2 19:13:54.291000 audit: BPF prog-id=164 op=UNLOAD Oct 2 19:13:54.291000 audit: BPF prog-id=163 op=UNLOAD Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:54.291000 audit: BPF prog-id=165 op=LOAD Oct 2 19:13:54.291000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00038e328 items=0 ppid=3558 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:54.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332393963346565326531636133386164616537336631343566646134 Oct 2 19:13:54.513758 env[1108]: time="2023-10-02T19:13:54.513652453Z" level=info msg="StartContainer for \"c299c4ee2e1ca38adae73f145fda4ac46923400bce12d5305e68fb8ad83d64b8\" returns successfully" Oct 2 19:13:55.521725 kubelet[1992]: E1002 19:13:55.521689 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:55.667536 kubelet[1992]: I1002 19:13:55.667481 1992 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-9vvmg" podStartSLOduration=42.560569688 podCreationTimestamp="2023-10-02 19:13:11 +0000 UTC" firstStartedPulling="2023-10-02 19:13:52.127471736 +0000 UTC m=+55.270831766" lastFinishedPulling="2023-10-02 19:13:54.234324897 +0000 UTC m=+57.377684927" observedRunningTime="2023-10-02 19:13:55.648974692 +0000 UTC m=+58.792334722" watchObservedRunningTime="2023-10-02 19:13:55.667422849 +0000 UTC m=+58.810782889" Oct 2 19:13:55.670000 audit[3925]: NETFILTER_CFG table=filter:107 family=2 entries=14 op=nft_register_rule pid=3925 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:55.671934 kernel: kauditd_printk_skb: 325 callbacks suppressed Oct 2 19:13:55.672014 kernel: audit: type=1325 audit(1696274035.670:1290): table=filter:107 family=2 entries=14 op=nft_register_rule pid=3925 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:55.670000 audit[3925]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7fff107dab50 a2=0 a3=7fff107dab3c items=0 ppid=2193 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:55.678544 kernel: audit: type=1300 audit(1696274035.670:1290): arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7fff107dab50 a2=0 a3=7fff107dab3c items=0 ppid=2193 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:55.681102 kernel: audit: type=1327 audit(1696274035.670:1290): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:55.670000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:55.671000 audit[3925]: NETFILTER_CFG table=nat:108 family=2 entries=14 op=nft_register_rule pid=3925 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:55.671000 audit[3925]: SYSCALL arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7fff107dab50 a2=0 a3=31030 items=0 ppid=2193 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:55.692786 kernel: audit: type=1325 audit(1696274035.671:1291): table=nat:108 family=2 entries=14 op=nft_register_rule pid=3925 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:55.693001 kernel: audit: type=1300 audit(1696274035.671:1291): arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7fff107dab50 a2=0 a3=31030 items=0 ppid=2193 pid=3925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:55.693036 kernel: audit: type=1327 audit(1696274035.671:1291): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:55.671000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:55.693000 audit[3927]: NETFILTER_CFG table=filter:109 family=2 entries=11 op=nft_register_rule pid=3927 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:55.693000 audit[3927]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffddc8588d0 a2=0 a3=7ffddc8588bc items=0 ppid=2193 pid=3927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:55.704395 kernel: audit: type=1325 audit(1696274035.693:1292): table=filter:109 family=2 entries=11 op=nft_register_rule pid=3927 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:55.704452 kernel: audit: type=1300 audit(1696274035.693:1292): arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffddc8588d0 a2=0 a3=7ffddc8588bc items=0 ppid=2193 pid=3927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:55.704488 kernel: audit: type=1327 audit(1696274035.693:1292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:55.693000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:55.700000 audit[3927]: NETFILTER_CFG table=nat:110 family=2 entries=35 op=nft_register_chain pid=3927 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:55.700000 audit[3927]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffddc8588d0 a2=0 a3=7ffddc8588bc items=0 ppid=2193 pid=3927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:55.700000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:55.710264 kernel: audit: type=1325 audit(1696274035.700:1293): table=nat:110 family=2 entries=35 op=nft_register_chain pid=3927 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:56.522921 kubelet[1992]: E1002 19:13:56.522871 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:56.960244 env[1108]: time="2023-10-02T19:13:56.960175912Z" level=info msg="StopPodSandbox for \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\"" Oct 2 19:13:57.035962 env[1108]: 2023-10-02 19:13:57.004 [WARNING][3946] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--ps8zf-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ebe01108-b16f-455c-a06f-e81b35aae910", ResourceVersion:"824", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e", Pod:"csi-node-driver-ps8zf", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calic2111b3e785", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:57.035962 env[1108]: 2023-10-02 19:13:57.005 [INFO][3946] k8s.go 576: Cleaning up netns ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:57.035962 env[1108]: 2023-10-02 19:13:57.005 [INFO][3946] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" iface="eth0" netns="" Oct 2 19:13:57.035962 env[1108]: 2023-10-02 19:13:57.005 [INFO][3946] k8s.go 583: Releasing IP address(es) ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:57.035962 env[1108]: 2023-10-02 19:13:57.005 [INFO][3946] utils.go 196: Calico CNI releasing IP address ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:57.035962 env[1108]: 2023-10-02 19:13:57.023 [INFO][3954] ipam_plugin.go 416: Releasing address using handleID ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" HandleID="k8s-pod-network.0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:57.035962 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:57.035962 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:57.035962 env[1108]: 2023-10-02 19:13:57.030 [WARNING][3954] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" HandleID="k8s-pod-network.0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:57.035962 env[1108]: 2023-10-02 19:13:57.030 [INFO][3954] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" HandleID="k8s-pod-network.0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:57.035962 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:57.035962 env[1108]: 2023-10-02 19:13:57.034 [INFO][3946] k8s.go 589: Teardown processing complete. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:57.038697 env[1108]: time="2023-10-02T19:13:57.035986950Z" level=info msg="TearDown network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\" successfully" Oct 2 19:13:57.038697 env[1108]: time="2023-10-02T19:13:57.036019720Z" level=info msg="StopPodSandbox for \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\" returns successfully" Oct 2 19:13:57.038697 env[1108]: time="2023-10-02T19:13:57.036484537Z" level=info msg="RemovePodSandbox for \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\"" Oct 2 19:13:57.038697 env[1108]: time="2023-10-02T19:13:57.036525181Z" level=info msg="Forcibly stopping sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\"" Oct 2 19:13:57.135979 env[1108]: 2023-10-02 19:13:57.078 [WARNING][3978] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--ps8zf-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ebe01108-b16f-455c-a06f-e81b35aae910", ResourceVersion:"824", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"759544bff5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e2fbe95229678cf9576fdbe7050328efb1860d46975c5283ef4f756b04c3e00e", Pod:"csi-node-driver-ps8zf", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calic2111b3e785", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:57.135979 env[1108]: 2023-10-02 19:13:57.078 [INFO][3978] k8s.go 576: Cleaning up netns ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:57.135979 env[1108]: 2023-10-02 19:13:57.078 [INFO][3978] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" iface="eth0" netns="" Oct 2 19:13:57.135979 env[1108]: 2023-10-02 19:13:57.078 [INFO][3978] k8s.go 583: Releasing IP address(es) ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:57.135979 env[1108]: 2023-10-02 19:13:57.078 [INFO][3978] utils.go 196: Calico CNI releasing IP address ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:57.135979 env[1108]: 2023-10-02 19:13:57.103 [INFO][3985] ipam_plugin.go 416: Releasing address using handleID ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" HandleID="k8s-pod-network.0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:57.135979 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:57.135979 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:57.135979 env[1108]: 2023-10-02 19:13:57.111 [WARNING][3985] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" HandleID="k8s-pod-network.0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:57.135979 env[1108]: 2023-10-02 19:13:57.111 [INFO][3985] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" HandleID="k8s-pod-network.0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Workload="localhost-k8s-csi--node--driver--ps8zf-eth0" Oct 2 19:13:57.135979 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:57.135979 env[1108]: 2023-10-02 19:13:57.114 [INFO][3978] k8s.go 589: Teardown processing complete. ContainerID="0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3" Oct 2 19:13:57.136611 env[1108]: time="2023-10-02T19:13:57.136024383Z" level=info msg="TearDown network for sandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\" successfully" Oct 2 19:13:57.421956 env[1108]: time="2023-10-02T19:13:57.421805412Z" level=info msg="RemovePodSandbox \"0aa72b666554b641653725f7ed5efeb73a6f5015d701f8cbe47444f6037d87c3\" returns successfully" Oct 2 19:13:57.422420 env[1108]: time="2023-10-02T19:13:57.422392911Z" level=info msg="StopPodSandbox for \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\"" Oct 2 19:13:57.499262 env[1108]: 2023-10-02 19:13:57.460 [WARNING][4008] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--nq92d-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"0af74e32-824b-4dfe-b295-a3e3c69aff70", ResourceVersion:"827", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee", Pod:"coredns-5d78c9869d-nq92d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali371ad098774", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:57.499262 env[1108]: 2023-10-02 19:13:57.460 [INFO][4008] k8s.go 576: Cleaning up netns ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:57.499262 env[1108]: 2023-10-02 19:13:57.460 [INFO][4008] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" iface="eth0" netns="" Oct 2 19:13:57.499262 env[1108]: 2023-10-02 19:13:57.460 [INFO][4008] k8s.go 583: Releasing IP address(es) ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:57.499262 env[1108]: 2023-10-02 19:13:57.460 [INFO][4008] utils.go 196: Calico CNI releasing IP address ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:57.499262 env[1108]: 2023-10-02 19:13:57.482 [INFO][4016] ipam_plugin.go 416: Releasing address using handleID ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" HandleID="k8s-pod-network.f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:57.499262 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:57.499262 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:57.499262 env[1108]: 2023-10-02 19:13:57.492 [WARNING][4016] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" HandleID="k8s-pod-network.f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:57.499262 env[1108]: 2023-10-02 19:13:57.492 [INFO][4016] ipam_plugin.go 444: Releasing address using workloadID ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" HandleID="k8s-pod-network.f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:57.499262 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:57.499262 env[1108]: 2023-10-02 19:13:57.497 [INFO][4008] k8s.go 589: Teardown processing complete. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:57.499262 env[1108]: time="2023-10-02T19:13:57.499172523Z" level=info msg="TearDown network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\" successfully" Oct 2 19:13:57.499262 env[1108]: time="2023-10-02T19:13:57.499262525Z" level=info msg="StopPodSandbox for \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\" returns successfully" Oct 2 19:13:57.500177 env[1108]: time="2023-10-02T19:13:57.500066895Z" level=info msg="RemovePodSandbox for \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\"" Oct 2 19:13:57.500445 env[1108]: time="2023-10-02T19:13:57.500129278Z" level=info msg="Forcibly stopping sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\"" Oct 2 19:13:57.532337 kubelet[1992]: E1002 19:13:57.531275 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:57.591009 env[1108]: 2023-10-02 19:13:57.553 [WARNING][4040] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--nq92d-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"0af74e32-824b-4dfe-b295-a3e3c69aff70", ResourceVersion:"827", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee", Pod:"coredns-5d78c9869d-nq92d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali371ad098774", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:57.591009 env[1108]: 2023-10-02 19:13:57.553 [INFO][4040] k8s.go 576: Cleaning up netns ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:57.591009 env[1108]: 2023-10-02 19:13:57.553 [INFO][4040] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" iface="eth0" netns="" Oct 2 19:13:57.591009 env[1108]: 2023-10-02 19:13:57.553 [INFO][4040] k8s.go 583: Releasing IP address(es) ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:57.591009 env[1108]: 2023-10-02 19:13:57.553 [INFO][4040] utils.go 196: Calico CNI releasing IP address ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:57.591009 env[1108]: 2023-10-02 19:13:57.576 [INFO][4047] ipam_plugin.go 416: Releasing address using handleID ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" HandleID="k8s-pod-network.f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:57.591009 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:57.591009 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:57.591009 env[1108]: 2023-10-02 19:13:57.584 [WARNING][4047] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" HandleID="k8s-pod-network.f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:57.591009 env[1108]: 2023-10-02 19:13:57.585 [INFO][4047] ipam_plugin.go 444: Releasing address using workloadID ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" HandleID="k8s-pod-network.f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Workload="localhost-k8s-coredns--5d78c9869d--nq92d-eth0" Oct 2 19:13:57.591009 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:57.591009 env[1108]: 2023-10-02 19:13:57.589 [INFO][4040] k8s.go 589: Teardown processing complete. ContainerID="f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4" Oct 2 19:13:57.591668 env[1108]: time="2023-10-02T19:13:57.591038412Z" level=info msg="TearDown network for sandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\" successfully" Oct 2 19:13:57.596701 env[1108]: time="2023-10-02T19:13:57.596627479Z" level=info msg="RemovePodSandbox \"f92709ac25ff306545667ae6e523199a9df046e28bc5ce50b850018b9354ddd4\" returns successfully" Oct 2 19:13:57.597401 env[1108]: time="2023-10-02T19:13:57.597370278Z" level=info msg="StopPodSandbox for \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\"" Oct 2 19:13:57.691017 env[1108]: 2023-10-02 19:13:57.653 [WARNING][4072] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0", GenerateName:"calico-kube-controllers-7bd445fdb4-", Namespace:"calico-system", SelfLink:"", UID:"f589a762-5083-4073-a423-7886fa817b69", ResourceVersion:"821", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bd445fdb4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8", Pod:"calico-kube-controllers-7bd445fdb4-pr92n", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali19fad530ea5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:57.691017 env[1108]: 2023-10-02 19:13:57.654 [INFO][4072] k8s.go 576: Cleaning up netns ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:57.691017 env[1108]: 2023-10-02 19:13:57.654 [INFO][4072] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" iface="eth0" netns="" Oct 2 19:13:57.691017 env[1108]: 2023-10-02 19:13:57.654 [INFO][4072] k8s.go 583: Releasing IP address(es) ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:57.691017 env[1108]: 2023-10-02 19:13:57.654 [INFO][4072] utils.go 196: Calico CNI releasing IP address ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:57.691017 env[1108]: 2023-10-02 19:13:57.675 [INFO][4080] ipam_plugin.go 416: Releasing address using handleID ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" HandleID="k8s-pod-network.a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:57.691017 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:57.691017 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:57.691017 env[1108]: 2023-10-02 19:13:57.685 [WARNING][4080] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" HandleID="k8s-pod-network.a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:57.691017 env[1108]: 2023-10-02 19:13:57.685 [INFO][4080] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" HandleID="k8s-pod-network.a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:57.691017 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:57.691017 env[1108]: 2023-10-02 19:13:57.688 [INFO][4072] k8s.go 589: Teardown processing complete. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:57.691754 env[1108]: time="2023-10-02T19:13:57.691050259Z" level=info msg="TearDown network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\" successfully" Oct 2 19:13:57.691754 env[1108]: time="2023-10-02T19:13:57.691082818Z" level=info msg="StopPodSandbox for \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\" returns successfully" Oct 2 19:13:57.692063 env[1108]: time="2023-10-02T19:13:57.692012143Z" level=info msg="RemovePodSandbox for \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\"" Oct 2 19:13:57.692301 env[1108]: time="2023-10-02T19:13:57.692060691Z" level=info msg="Forcibly stopping sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\"" Oct 2 19:13:57.788232 env[1108]: 2023-10-02 19:13:57.738 [WARNING][4103] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0", GenerateName:"calico-kube-controllers-7bd445fdb4-", Namespace:"calico-system", SelfLink:"", UID:"f589a762-5083-4073-a423-7886fa817b69", ResourceVersion:"821", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bd445fdb4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"132b01ff3c05b203f83c8ea1377ec8fdb030b93247dfad3271d945fd45e294f8", Pod:"calico-kube-controllers-7bd445fdb4-pr92n", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali19fad530ea5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:57.788232 env[1108]: 2023-10-02 19:13:57.738 [INFO][4103] k8s.go 576: Cleaning up netns ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:57.788232 env[1108]: 2023-10-02 19:13:57.738 [INFO][4103] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" iface="eth0" netns="" Oct 2 19:13:57.788232 env[1108]: 2023-10-02 19:13:57.738 [INFO][4103] k8s.go 583: Releasing IP address(es) ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:57.788232 env[1108]: 2023-10-02 19:13:57.738 [INFO][4103] utils.go 196: Calico CNI releasing IP address ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:57.788232 env[1108]: 2023-10-02 19:13:57.771 [INFO][4110] ipam_plugin.go 416: Releasing address using handleID ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" HandleID="k8s-pod-network.a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:57.788232 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:57.788232 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:57.788232 env[1108]: 2023-10-02 19:13:57.781 [WARNING][4110] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" HandleID="k8s-pod-network.a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:57.788232 env[1108]: 2023-10-02 19:13:57.781 [INFO][4110] ipam_plugin.go 444: Releasing address using workloadID ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" HandleID="k8s-pod-network.a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Workload="localhost-k8s-calico--kube--controllers--7bd445fdb4--pr92n-eth0" Oct 2 19:13:57.788232 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:57.788232 env[1108]: 2023-10-02 19:13:57.786 [INFO][4103] k8s.go 589: Teardown processing complete. ContainerID="a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92" Oct 2 19:13:57.788762 env[1108]: time="2023-10-02T19:13:57.788281922Z" level=info msg="TearDown network for sandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\" successfully" Oct 2 19:13:57.793673 env[1108]: time="2023-10-02T19:13:57.793617923Z" level=info msg="RemovePodSandbox \"a0bff79e853402446d7ec99d93dc9e150d67a59a5efbb812c63f6dbe657cbd92\" returns successfully" Oct 2 19:13:57.794264 env[1108]: time="2023-10-02T19:13:57.794189653Z" level=info msg="StopPodSandbox for \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\"" Oct 2 19:13:57.887151 env[1108]: 2023-10-02 19:13:57.846 [WARNING][4134] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--9vvmg-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"8a6273e5-22a9-4367-900d-d3c050deb6b1", ResourceVersion:"861", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab", Pod:"coredns-5d78c9869d-9vvmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali927f3c9b1c6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:57.887151 env[1108]: 2023-10-02 19:13:57.846 [INFO][4134] k8s.go 576: Cleaning up netns ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:57.887151 env[1108]: 2023-10-02 19:13:57.846 [INFO][4134] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" iface="eth0" netns="" Oct 2 19:13:57.887151 env[1108]: 2023-10-02 19:13:57.847 [INFO][4134] k8s.go 583: Releasing IP address(es) ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:57.887151 env[1108]: 2023-10-02 19:13:57.847 [INFO][4134] utils.go 196: Calico CNI releasing IP address ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:57.887151 env[1108]: 2023-10-02 19:13:57.871 [INFO][4141] ipam_plugin.go 416: Releasing address using handleID ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" HandleID="k8s-pod-network.9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:57.887151 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:57.887151 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:57.887151 env[1108]: 2023-10-02 19:13:57.880 [WARNING][4141] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" HandleID="k8s-pod-network.9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:57.887151 env[1108]: 2023-10-02 19:13:57.881 [INFO][4141] ipam_plugin.go 444: Releasing address using workloadID ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" HandleID="k8s-pod-network.9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:57.887151 env[1108]: time="2023-10-02T19:13:57Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:57.887151 env[1108]: 2023-10-02 19:13:57.885 [INFO][4134] k8s.go 589: Teardown processing complete. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:57.887950 env[1108]: time="2023-10-02T19:13:57.887225363Z" level=info msg="TearDown network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\" successfully" Oct 2 19:13:57.887950 env[1108]: time="2023-10-02T19:13:57.887258983Z" level=info msg="StopPodSandbox for \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\" returns successfully" Oct 2 19:13:57.887950 env[1108]: time="2023-10-02T19:13:57.887843958Z" level=info msg="RemovePodSandbox for \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\"" Oct 2 19:13:57.887950 env[1108]: time="2023-10-02T19:13:57.887879041Z" level=info msg="Forcibly stopping sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\"" Oct 2 19:13:58.026187 env[1108]: 2023-10-02 19:13:57.991 [WARNING][4164] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--9vvmg-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"8a6273e5-22a9-4367-900d-d3c050deb6b1", ResourceVersion:"861", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 13, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bf24d34e5914b6f372ad71e41f2126b745caf4a86e83503795bc1e57539610ab", Pod:"coredns-5d78c9869d-9vvmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali927f3c9b1c6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:13:58.026187 env[1108]: 2023-10-02 19:13:57.992 [INFO][4164] k8s.go 576: Cleaning up netns ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:58.026187 env[1108]: 2023-10-02 19:13:57.992 [INFO][4164] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" iface="eth0" netns="" Oct 2 19:13:58.026187 env[1108]: 2023-10-02 19:13:57.992 [INFO][4164] k8s.go 583: Releasing IP address(es) ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:58.026187 env[1108]: 2023-10-02 19:13:57.992 [INFO][4164] utils.go 196: Calico CNI releasing IP address ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:58.026187 env[1108]: 2023-10-02 19:13:58.013 [INFO][4172] ipam_plugin.go 416: Releasing address using handleID ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" HandleID="k8s-pod-network.9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:58.026187 env[1108]: time="2023-10-02T19:13:58Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:13:58.026187 env[1108]: time="2023-10-02T19:13:58Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:13:58.026187 env[1108]: 2023-10-02 19:13:58.020 [WARNING][4172] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" HandleID="k8s-pod-network.9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:58.026187 env[1108]: 2023-10-02 19:13:58.020 [INFO][4172] ipam_plugin.go 444: Releasing address using workloadID ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" HandleID="k8s-pod-network.9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Workload="localhost-k8s-coredns--5d78c9869d--9vvmg-eth0" Oct 2 19:13:58.026187 env[1108]: time="2023-10-02T19:13:58Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:13:58.026187 env[1108]: 2023-10-02 19:13:58.024 [INFO][4164] k8s.go 589: Teardown processing complete. ContainerID="9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa" Oct 2 19:13:58.026187 env[1108]: time="2023-10-02T19:13:58.026153751Z" level=info msg="TearDown network for sandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\" successfully" Oct 2 19:13:58.070473 env[1108]: time="2023-10-02T19:13:58.070417725Z" level=info msg="RemovePodSandbox \"9fa7e5987a94cdf0074be6d8ea3602c91cb32f9f419250b6f4fec56d35aae4aa\" returns successfully" Oct 2 19:13:58.457000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.457000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013ee940 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:13:58.457000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:58.459000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.459000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e9d540 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:13:58.459000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:58.493000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.493000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e9d580 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:13:58.493000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:58.493000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6786 scontext=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.493000 audit[1847]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e9d5c0 a2=fc6 a3=0 items=0 ppid=1711 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c221,c412 key=(null) Oct 2 19:13:58.493000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:58.700789 kubelet[1992]: E1002 19:13:58.700719 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:59.048120 env[1108]: time="2023-10-02T19:13:59.048022999Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/114/fs/usr/bin/check-status: no space left on device: unknown" Oct 2 19:13:59.048697 kubelet[1992]: E1002 19:13:59.048416 1992 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/114/fs/usr/bin/check-status: no space left on device: unknown" image="ghcr.io/flatcar/calico/kube-controllers:v3.25.0" Oct 2 19:13:59.048697 kubelet[1992]: E1002 19:13:59.048482 1992 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/114/fs/usr/bin/check-status: no space left on device: unknown" image="ghcr.io/flatcar/calico/kube-controllers:v3.25.0" Oct 2 19:13:59.048804 kubelet[1992]: E1002 19:13:59.048734 1992 kuberuntime_manager.go:1212] container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,ValueFrom:nil,},EnvVar{Name:FIPS_MODE_ENABLED,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-5shlq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-kube-controllers-7bd445fdb4-pr92n_calico-system(f589a762-5083-4073-a423-7886fa817b69): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/kube-controllers:v3.25.0": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/114/fs/usr/bin/check-status: no space left on device: unknown Oct 2 19:13:59.048804 kubelet[1992]: E1002 19:13:59.048792 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\\\": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/114/fs/usr/bin/check-status: no space left on device: unknown\"" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" podUID=f589a762-5083-4073-a423-7886fa817b69 Oct 2 19:13:59.049011 env[1108]: time="2023-10-02T19:13:59.048917672Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:13:59.306346 env[1108]: time="2023-10-02T19:13:59.306142115Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:13:59.307676 env[1108]: time="2023-10-02T19:13:59.307605900Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:13:59.307998 kubelet[1992]: E1002 19:13:59.307957 1992 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:13:59.308072 kubelet[1992]: E1002 19:13:59.308013 1992 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:13:59.308423 kubelet[1992]: E1002 19:13:59.308330 1992 kuberuntime_manager.go:1212] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-s5qxs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-ps8zf_calico-system(ebe01108-b16f-455c-a06f-e81b35aae910): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:13:59.308789 env[1108]: time="2023-10-02T19:13:59.308376949Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:13:59.470878 env[1108]: time="2023-10-02T19:13:59.470801468Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.472971 env[1108]: time="2023-10-02T19:13:59.472912006Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.474898 env[1108]: time="2023-10-02T19:13:59.474863085Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.476612 env[1108]: time="2023-10-02T19:13:59.476537341Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.477393 env[1108]: time="2023-10-02T19:13:59.477250084Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:13:59.478586 env[1108]: time="2023-10-02T19:13:59.477921682Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:13:59.478678 kubelet[1992]: E1002 19:13:59.478489 1992 kuberuntime_manager.go:1212] container &Container{Name:coredns,Image:registry.k8s.io/coredns/coredns:v1.10.1,Command:[],Args:[-conf /etc/coredns/Corefile],WorkingDir:,Ports:[]ContainerPort{ContainerPort{Name:dns,HostPort:0,ContainerPort:53,Protocol:UDP,HostIP:,},ContainerPort{Name:dns-tcp,HostPort:0,ContainerPort:53,Protocol:TCP,HostIP:,},ContainerPort{Name:metrics,HostPort:0,ContainerPort:9153,Protocol:TCP,HostIP:,},},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{memory: {{178257920 0} {} 170Mi BinarySI},},Requests:ResourceList{cpu: {{100 -3} {} 100m DecimalSI},memory: {{73400320 0} {} 70Mi BinarySI},},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config-volume,ReadOnly:true,MountPath:/etc/coredns,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6fwnl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/health,Port:{0 8080 },Host:,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:60,TimeoutSeconds:5,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/ready,Port:{0 8181 },Host:,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[NET_BIND_SERVICE],Drop:[all],},Privileged:nil,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:*true,AllowPrivilegeEscalation:*false,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod coredns-5d78c9869d-nq92d_kube-system(0af74e32-824b-4dfe-b295-a3e3c69aff70): CreateContainerConfigError: write /var/lib/kubelet/pods/0af74e32-824b-4dfe-b295-a3e3c69aff70/etc-hosts: no space left on device Oct 2 19:13:59.478678 kubelet[1992]: E1002 19:13:59.478546 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"coredns\" with CreateContainerConfigError: \"write /var/lib/kubelet/pods/0af74e32-824b-4dfe-b295-a3e3c69aff70/etc-hosts: no space left on device\"" pod="kube-system/coredns-5d78c9869d-nq92d" podUID=0af74e32-824b-4dfe-b295-a3e3c69aff70 Oct 2 19:13:59.543476 kubelet[1992]: E1002 19:13:59.543419 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:59.544250 kubelet[1992]: E1002 19:13:59.544202 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\\\"\"" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" podUID=f589a762-5083-4073-a423-7886fa817b69 Oct 2 19:13:59.544695 kubelet[1992]: E1002 19:13:59.544646 1992 kuberuntime_manager.go:1212] container &Container{Name:coredns,Image:registry.k8s.io/coredns/coredns:v1.10.1,Command:[],Args:[-conf /etc/coredns/Corefile],WorkingDir:,Ports:[]ContainerPort{ContainerPort{Name:dns,HostPort:0,ContainerPort:53,Protocol:UDP,HostIP:,},ContainerPort{Name:dns-tcp,HostPort:0,ContainerPort:53,Protocol:TCP,HostIP:,},ContainerPort{Name:metrics,HostPort:0,ContainerPort:9153,Protocol:TCP,HostIP:,},},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{memory: {{178257920 0} {} 170Mi BinarySI},},Requests:ResourceList{cpu: {{100 -3} {} 100m DecimalSI},memory: {{73400320 0} {} 70Mi BinarySI},},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config-volume,ReadOnly:true,MountPath:/etc/coredns,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6fwnl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/health,Port:{0 8080 },Host:,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:60,TimeoutSeconds:5,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/ready,Port:{0 8181 },Host:,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[NET_BIND_SERVICE],Drop:[all],},Privileged:nil,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:*true,AllowPrivilegeEscalation:*false,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod coredns-5d78c9869d-nq92d_kube-system(0af74e32-824b-4dfe-b295-a3e3c69aff70): CreateContainerConfigError: write /var/lib/kubelet/pods/0af74e32-824b-4dfe-b295-a3e3c69aff70/etc-hosts: no space left on device Oct 2 19:13:59.544695 kubelet[1992]: E1002 19:13:59.544698 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"coredns\" with CreateContainerConfigError: \"write /var/lib/kubelet/pods/0af74e32-824b-4dfe-b295-a3e3c69aff70/etc-hosts: no space left on device\"" pod="kube-system/coredns-5d78c9869d-nq92d" podUID=0af74e32-824b-4dfe-b295-a3e3c69aff70 Oct 2 19:13:59.569000 audit[4203]: NETFILTER_CFG table=filter:111 family=2 entries=8 op=nft_register_rule pid=4203 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:59.569000 audit[4203]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffc3085a280 a2=0 a3=7ffc3085a26c items=0 ppid=2193 pid=4203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:59.569000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:59.571000 audit[4203]: NETFILTER_CFG table=nat:112 family=2 entries=44 op=nft_register_rule pid=4203 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:13:59.571000 audit[4203]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffc3085a280 a2=0 a3=7ffc3085a26c items=0 ppid=2193 pid=4203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:59.571000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:13:59.726387 env[1108]: time="2023-10-02T19:13:59.726303628Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:13:59.727521 env[1108]: time="2023-10-02T19:13:59.727479201Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:13:59.727822 kubelet[1992]: E1002 19:13:59.727775 1992 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:13:59.727822 kubelet[1992]: E1002 19:13:59.727820 1992 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:13:59.728362 kubelet[1992]: E1002 19:13:59.727922 1992 kuberuntime_manager.go:1212] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s5qxs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-ps8zf_calico-system(ebe01108-b16f-455c-a06f-e81b35aae910): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:13:59.728362 kubelet[1992]: E1002 19:13:59.727998 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-ps8zf" podUID=ebe01108-b16f-455c-a06f-e81b35aae910 Oct 2 19:13:59.879956 systemd[1]: Started sshd@12-10.0.0.71:22-10.0.0.1:40046.service. Oct 2 19:13:59.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.71:22-10.0.0.1:40046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:59.927000 audit[4205]: USER_ACCT pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:59.929126 sshd[4205]: Accepted publickey for core from 10.0.0.1 port 40046 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:59.929000 audit[4205]: CRED_ACQ pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:59.929000 audit[4205]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce9740ca0 a2=3 a3=0 items=0 ppid=1 pid=4205 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:59.929000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:59.930736 sshd[4205]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:59.934236 systemd-logind[1096]: New session 13 of user core. Oct 2 19:13:59.935146 systemd[1]: Started session-13.scope. Oct 2 19:13:59.938000 audit[4205]: USER_START pid=4205 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:59.940000 audit[4207]: CRED_ACQ pid=4207 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:59.979963 kubelet[1992]: I1002 19:13:59.979884 1992 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:59.979963 kubelet[1992]: I1002 19:13:59.979951 1992 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:59.981892 kubelet[1992]: I1002 19:13:59.981849 1992 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:14:00.000526 kubelet[1992]: I1002 19:14:00.000488 1992 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:00.000700 kubelet[1992]: I1002 19:14:00.000647 1992 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[kube-system/coredns-5d78c9869d-nq92d calico-system/calico-kube-controllers-7bd445fdb4-pr92n calico-system/csi-node-driver-ps8zf calico-system/calico-typha-6894746b66-v5gdt kube-system/coredns-5d78c9869d-9vvmg calico-system/calico-node-f8vfp kube-system/kube-proxy-bsdrc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:14:00.000700 kubelet[1992]: E1002 19:14:00.000675 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-nq92d" Oct 2 19:14:00.000700 kubelet[1992]: E1002 19:14:00.000685 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" Oct 2 19:14:00.000700 kubelet[1992]: E1002 19:14:00.000692 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:14:00.000700 kubelet[1992]: E1002 19:14:00.000703 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-6894746b66-v5gdt" Oct 2 19:14:00.000905 kubelet[1992]: E1002 19:14:00.000713 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-9vvmg" Oct 2 19:14:00.000905 kubelet[1992]: E1002 19:14:00.000722 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-f8vfp" Oct 2 19:14:00.000905 kubelet[1992]: E1002 19:14:00.000730 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-bsdrc" Oct 2 19:14:00.000905 kubelet[1992]: E1002 19:14:00.000738 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:14:00.000905 kubelet[1992]: E1002 19:14:00.000748 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:14:00.000905 kubelet[1992]: E1002 19:14:00.000756 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:14:00.000905 kubelet[1992]: I1002 19:14:00.000766 1992 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:14:00.063420 sshd[4205]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:00.063000 audit[4205]: USER_END pid=4205 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:00.063000 audit[4205]: CRED_DISP pid=4205 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:00.068018 systemd[1]: sshd@12-10.0.0.71:22-10.0.0.1:40046.service: Deactivated successfully. Oct 2 19:14:00.069070 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:14:00.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.71:22-10.0.0.1:40046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.069875 systemd-logind[1096]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:14:00.070743 systemd-logind[1096]: Removed session 13. Oct 2 19:14:00.546508 kubelet[1992]: E1002 19:14:00.546454 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-ps8zf" podUID=ebe01108-b16f-455c-a06f-e81b35aae910 Oct 2 19:14:10.021322 kubelet[1992]: I1002 19:14:10.021267 1992 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:10.021322 kubelet[1992]: I1002 19:14:10.021312 1992 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:14:10.023083 kubelet[1992]: I1002 19:14:10.023045 1992 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:14:10.037136 kubelet[1992]: I1002 19:14:10.037102 1992 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:10.037310 kubelet[1992]: I1002 19:14:10.037262 1992 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[calico-system/calico-kube-controllers-7bd445fdb4-pr92n kube-system/coredns-5d78c9869d-nq92d calico-system/csi-node-driver-ps8zf calico-system/calico-typha-6894746b66-v5gdt kube-system/coredns-5d78c9869d-9vvmg calico-system/calico-node-f8vfp kube-system/kube-controller-manager-localhost kube-system/kube-proxy-bsdrc kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:14:10.037310 kubelet[1992]: E1002 19:14:10.037296 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" Oct 2 19:14:10.037310 kubelet[1992]: E1002 19:14:10.037306 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-nq92d" Oct 2 19:14:10.037445 kubelet[1992]: E1002 19:14:10.037315 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:14:10.037445 kubelet[1992]: E1002 19:14:10.037329 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-6894746b66-v5gdt" Oct 2 19:14:10.037445 kubelet[1992]: E1002 19:14:10.037340 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-9vvmg" Oct 2 19:14:10.037445 kubelet[1992]: E1002 19:14:10.037350 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-f8vfp" Oct 2 19:14:10.037445 kubelet[1992]: E1002 19:14:10.037360 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:14:10.037445 kubelet[1992]: E1002 19:14:10.037370 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-bsdrc" Oct 2 19:14:10.037445 kubelet[1992]: E1002 19:14:10.037385 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:14:10.037445 kubelet[1992]: E1002 19:14:10.037396 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:14:10.037445 kubelet[1992]: I1002 19:14:10.037410 1992 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:14:10.069146 systemd[1]: Started sshd@13-10.0.0.71:22-10.0.0.1:43366.service. Oct 2 19:14:10.072921 kernel: kauditd_printk_skb: 31 callbacks suppressed Oct 2 19:14:10.072965 kernel: audit: type=1130 audit(1696274050.068:1309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.71:22-10.0.0.1:43366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.71:22-10.0.0.1:43366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.110000 audit[4255]: USER_ACCT pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.111737 sshd[4255]: Accepted publickey for core from 10.0.0.1 port 43366 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:10.113000 audit[4255]: CRED_ACQ pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.115484 sshd[4255]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:10.118055 kernel: audit: type=1101 audit(1696274050.110:1310): pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.118237 kernel: audit: type=1103 audit(1696274050.113:1311): pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.118272 kernel: audit: type=1006 audit(1696274050.113:1312): pid=4255 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:14:10.119474 systemd-logind[1096]: New session 14 of user core. Oct 2 19:14:10.120205 kernel: audit: type=1300 audit(1696274050.113:1312): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8bdb84f0 a2=3 a3=0 items=0 ppid=1 pid=4255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:10.113000 audit[4255]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8bdb84f0 a2=3 a3=0 items=0 ppid=1 pid=4255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:10.120545 systemd[1]: Started session-14.scope. Oct 2 19:14:10.113000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:10.124529 kernel: audit: type=1327 audit(1696274050.113:1312): proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:10.124000 audit[4255]: USER_START pid=4255 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.124000 audit[4257]: CRED_ACQ pid=4257 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.132475 kernel: audit: type=1105 audit(1696274050.124:1313): pid=4255 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.132539 kernel: audit: type=1103 audit(1696274050.124:1314): pid=4257 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.243452 sshd[4255]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:10.243000 audit[4255]: USER_END pid=4255 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.245712 systemd[1]: sshd@13-10.0.0.71:22-10.0.0.1:43366.service: Deactivated successfully. Oct 2 19:14:10.246463 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:14:10.243000 audit[4255]: CRED_DISP pid=4255 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.249991 kernel: audit: type=1106 audit(1696274050.243:1315): pid=4255 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.250082 kernel: audit: type=1104 audit(1696274050.243:1316): pid=4255 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:10.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.71:22-10.0.0.1:43366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.250361 systemd-logind[1096]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:14:10.251185 systemd-logind[1096]: Removed session 14. Oct 2 19:14:12.000770 env[1108]: time="2023-10-02T19:14:12.000710886Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:14:12.295869 env[1108]: time="2023-10-02T19:14:12.295606554Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:14:12.306198 env[1108]: time="2023-10-02T19:14:12.306104057Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:14:12.306612 kubelet[1992]: E1002 19:14:12.306571 1992 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:14:12.307397 kubelet[1992]: E1002 19:14:12.306639 1992 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:14:12.307397 kubelet[1992]: E1002 19:14:12.306798 1992 kuberuntime_manager.go:1212] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-s5qxs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-ps8zf_calico-system(ebe01108-b16f-455c-a06f-e81b35aae910): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:14:12.307803 env[1108]: time="2023-10-02T19:14:12.307731839Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:14:12.571191 env[1108]: time="2023-10-02T19:14:12.571041904Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:14:12.572450 env[1108]: time="2023-10-02T19:14:12.572410091Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:14:12.572625 kubelet[1992]: E1002 19:14:12.572600 1992 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:14:12.572690 kubelet[1992]: E1002 19:14:12.572640 1992 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:14:12.572746 kubelet[1992]: E1002 19:14:12.572727 1992 kuberuntime_manager.go:1212] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-s5qxs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod csi-node-driver-ps8zf_calico-system(ebe01108-b16f-455c-a06f-e81b35aae910): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:14:12.572863 kubelet[1992]: E1002 19:14:12.572794 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-ps8zf" podUID=ebe01108-b16f-455c-a06f-e81b35aae910 Oct 2 19:14:13.000542 env[1108]: time="2023-10-02T19:14:13.000475900Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:14:14.999433 kubelet[1992]: E1002 19:14:14.999396 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:15.001136 env[1108]: time="2023-10-02T19:14:15.001093748Z" level=info msg="CreateContainer within sandbox \"183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:14:15.107487 env[1108]: time="2023-10-02T19:14:15.107431682Z" level=info msg="CreateContainer within sandbox \"183a8ec66411afe23cce11217d0e6057ea482c22488081542a7fdd986d668fee\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"80405e04f09bb563d0b1030f93bf403f2a204cf1fb8832992ca4733ccd85bebc\"" Oct 2 19:14:15.108003 env[1108]: time="2023-10-02T19:14:15.107910151Z" level=info msg="StartContainer for \"80405e04f09bb563d0b1030f93bf403f2a204cf1fb8832992ca4733ccd85bebc\"" Oct 2 19:14:15.129652 systemd[1]: Started cri-containerd-80405e04f09bb563d0b1030f93bf403f2a204cf1fb8832992ca4733ccd85bebc.scope. Oct 2 19:14:15.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147945 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:14:15.148000 kernel: audit: type=1400 audit(1696274055.144:1318): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148018 kernel: audit: type=1400 audit(1696274055.144:1319): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.151962 kernel: audit: type=1400 audit(1696274055.144:1320): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.152056 kernel: audit: type=1400 audit(1696274055.144:1321): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.157248 kernel: audit: type=1400 audit(1696274055.144:1322): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.157310 kernel: audit: type=1400 audit(1696274055.144:1323): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.160201 kernel: audit: type=1400 audit(1696274055.144:1324): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.160264 kernel: audit: type=1400 audit(1696274055.144:1325): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.162086 kernel: audit: type=1400 audit(1696274055.144:1326): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.164097 kernel: audit: type=1400 audit(1696274055.146:1327): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.146000 audit: BPF prog-id=166 op=LOAD Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3828 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:15.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830343035653034663039626235363364306231303330663933626634 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3828 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:15.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830343035653034663039626235363364306231303330663933626634 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.147000 audit: BPF prog-id=167 op=LOAD Oct 2 19:14:15.147000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000298af0 items=0 ppid=3828 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:15.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830343035653034663039626235363364306231303330663933626634 Oct 2 19:14:15.148000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.148000 audit: BPF prog-id=168 op=LOAD Oct 2 19:14:15.148000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000298b38 items=0 ppid=3828 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:15.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830343035653034663039626235363364306231303330663933626634 Oct 2 19:14:15.154000 audit: BPF prog-id=168 op=UNLOAD Oct 2 19:14:15.154000 audit: BPF prog-id=167 op=UNLOAD Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:15.154000 audit: BPF prog-id=169 op=LOAD Oct 2 19:14:15.154000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000298f48 items=0 ppid=3828 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:15.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830343035653034663039626235363364306231303330663933626634 Oct 2 19:14:15.180831 env[1108]: time="2023-10-02T19:14:15.180718906Z" level=info msg="StartContainer for \"80405e04f09bb563d0b1030f93bf403f2a204cf1fb8832992ca4733ccd85bebc\" returns successfully" Oct 2 19:14:15.575405 kubelet[1992]: E1002 19:14:15.575350 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:15.604187 kubelet[1992]: I1002 19:14:15.604126 1992 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-nq92d" podStartSLOduration=57.660870842 podCreationTimestamp="2023-10-02 19:13:11 +0000 UTC" firstStartedPulling="2023-10-02 19:13:52.534455809 +0000 UTC m=+55.677815839" lastFinishedPulling="2023-10-02 19:13:59.477619964 +0000 UTC m=+62.620980004" observedRunningTime="2023-10-02 19:14:15.586940723 +0000 UTC m=+78.730300753" watchObservedRunningTime="2023-10-02 19:14:15.604035007 +0000 UTC m=+78.747395037" Oct 2 19:14:15.620000 audit[4307]: NETFILTER_CFG table=filter:113 family=2 entries=8 op=nft_register_rule pid=4307 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:14:15.620000 audit[4307]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffe07bdfab0 a2=0 a3=7ffe07bdfa9c items=0 ppid=2193 pid=4307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:15.620000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:15.628000 audit[4307]: NETFILTER_CFG table=nat:114 family=2 entries=56 op=nft_register_chain pid=4307 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:14:15.628000 audit[4307]: SYSCALL arch=c000003e syscall=46 success=yes exit=19452 a0=3 a1=7ffe07bdfab0 a2=0 a3=7ffe07bdfa9c items=0 ppid=2193 pid=4307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:15.628000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:15.997296 env[1108]: time="2023-10-02T19:14:15.997193986Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/128/fs/usr/bin/check-status: no space left on device: unknown" Oct 2 19:14:15.997638 kubelet[1992]: E1002 19:14:15.997565 1992 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/128/fs/usr/bin/check-status: no space left on device: unknown" image="ghcr.io/flatcar/calico/kube-controllers:v3.25.0" Oct 2 19:14:15.997638 kubelet[1992]: E1002 19:14:15.997610 1992 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/128/fs/usr/bin/check-status: no space left on device: unknown" image="ghcr.io/flatcar/calico/kube-controllers:v3.25.0" Oct 2 19:14:15.997790 kubelet[1992]: E1002 19:14:15.997711 1992 kuberuntime_manager.go:1212] container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,ValueFrom:nil,},EnvVar{Name:FIPS_MODE_ENABLED,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-5shlq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod calico-kube-controllers-7bd445fdb4-pr92n_calico-system(f589a762-5083-4073-a423-7886fa817b69): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/kube-controllers:v3.25.0": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/128/fs/usr/bin/check-status: no space left on device: unknown Oct 2 19:14:15.997790 kubelet[1992]: E1002 19:14:15.997748 1992 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\\\": failed to extract layer sha256:6b6e0e9a04c1ecba354ede804d30527d97f7a353167fe83105a30af34291d363: write /var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/128/fs/usr/bin/check-status: no space left on device: unknown\"" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" podUID=f589a762-5083-4073-a423-7886fa817b69 Oct 2 19:14:16.577198 kubelet[1992]: E1002 19:14:16.577152 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:17.579240 kubelet[1992]: E1002 19:14:17.579196 1992 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:18.660494 systemd[1]: run-containerd-runc-k8s.io-fd7f2fbff44001ac62a25e2ac3a44c433b313b9a064af6788c53b4913456149e-runc.LWft1l.mount: Deactivated successfully. Oct 2 19:14:20.058077 kubelet[1992]: I1002 19:14:20.058023 1992 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:20.058077 kubelet[1992]: I1002 19:14:20.058074 1992 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:14:20.059925 kubelet[1992]: I1002 19:14:20.059886 1992 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:14:20.074943 kubelet[1992]: I1002 19:14:20.074898 1992 eviction_manager.go:357] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:20.075127 kubelet[1992]: I1002 19:14:20.075048 1992 eviction_manager.go:375] "Eviction manager: pods ranked for eviction" pods=[calico-system/calico-kube-controllers-7bd445fdb4-pr92n calico-system/csi-node-driver-ps8zf calico-system/calico-typha-6894746b66-v5gdt kube-system/coredns-5d78c9869d-nq92d kube-system/coredns-5d78c9869d-9vvmg calico-system/calico-node-f8vfp kube-system/kube-proxy-bsdrc kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost] Oct 2 19:14:20.075127 kubelet[1992]: E1002 19:14:20.075073 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-kube-controllers-7bd445fdb4-pr92n" Oct 2 19:14:20.075127 kubelet[1992]: E1002 19:14:20.075080 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-ps8zf" Oct 2 19:14:20.075127 kubelet[1992]: E1002 19:14:20.075091 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-6894746b66-v5gdt" Oct 2 19:14:20.075127 kubelet[1992]: E1002 19:14:20.075099 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-nq92d" Oct 2 19:14:20.075127 kubelet[1992]: E1002 19:14:20.075107 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-5d78c9869d-9vvmg" Oct 2 19:14:20.075127 kubelet[1992]: E1002 19:14:20.075115 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-f8vfp" Oct 2 19:14:20.075127 kubelet[1992]: E1002 19:14:20.075123 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-bsdrc" Oct 2 19:14:20.075127 kubelet[1992]: E1002 19:14:20.075131 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:14:20.075360 kubelet[1992]: E1002 19:14:20.075150 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:14:20.075360 kubelet[1992]: E1002 19:14:20.075158 1992 eviction_manager.go:578] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:14:20.075360 kubelet[1992]: I1002 19:14:20.075168 1992 eviction_manager.go:407] "Eviction manager: unable to evict any pods from the node" Oct 2 19:14:20.249491 systemd[1]: Started sshd@14-10.0.0.71:22-10.0.0.1:50028.service. Oct 2 19:14:20.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.71:22-10.0.0.1:50028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:20.250309 kernel: kauditd_printk_skb: 53 callbacks suppressed Oct 2 19:14:20.250458 kernel: audit: type=1130 audit(1696274060.248:1338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.71:22-10.0.0.1:50028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:20.295000 audit[4341]: USER_ACCT pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.297650 sshd[4341]: Accepted publickey for core from 10.0.0.1 port 50028 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:20.298000 audit[4341]: CRED_ACQ pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.299934 sshd[4341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:20.302309 kernel: audit: type=1101 audit(1696274060.295:1339): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.302369 kernel: audit: type=1103 audit(1696274060.298:1340): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.302393 kernel: audit: type=1006 audit(1696274060.298:1341): pid=4341 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:14:20.303889 kernel: audit: type=1300 audit(1696274060.298:1341): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc653c0180 a2=3 a3=0 items=0 ppid=1 pid=4341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:20.298000 audit[4341]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc653c0180 a2=3 a3=0 items=0 ppid=1 pid=4341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:20.304520 systemd-logind[1096]: New session 15 of user core. Oct 2 19:14:20.305030 systemd[1]: Started session-15.scope. Oct 2 19:14:20.298000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:20.307337 kernel: audit: type=1327 audit(1696274060.298:1341): proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:20.308000 audit[4341]: USER_START pid=4341 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.310000 audit[4343]: CRED_ACQ pid=4343 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.315321 kernel: audit: type=1105 audit(1696274060.308:1342): pid=4341 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.315365 kernel: audit: type=1103 audit(1696274060.310:1343): pid=4343 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.428781 sshd[4341]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:20.428000 audit[4341]: USER_END pid=4341 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.432122 systemd[1]: sshd@14-10.0.0.71:22-10.0.0.1:50028.service: Deactivated successfully. Oct 2 19:14:20.433049 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:14:20.429000 audit[4341]: CRED_DISP pid=4341 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.434125 systemd-logind[1096]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:14:20.434998 systemd-logind[1096]: Removed session 15. Oct 2 19:14:20.437080 kernel: audit: type=1106 audit(1696274060.428:1344): pid=4341 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.437164 kernel: audit: type=1104 audit(1696274060.429:1345): pid=4341 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:20.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.71:22-10.0.0.1:50028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'