Oct 2 19:05:48.073415 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:05:48.073444 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:05:48.073460 kernel: BIOS-provided physical RAM map: Oct 2 19:05:48.073470 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:05:48.073477 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:05:48.073491 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:05:48.073501 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdcfff] usable Oct 2 19:05:48.073509 kernel: BIOS-e820: [mem 0x000000009cfdd000-0x000000009cffffff] reserved Oct 2 19:05:48.073521 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:05:48.073529 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:05:48.073537 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Oct 2 19:05:48.073547 kernel: NX (Execute Disable) protection: active Oct 2 19:05:48.073559 kernel: SMBIOS 2.8 present. Oct 2 19:05:48.073567 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Oct 2 19:05:48.073587 kernel: Hypervisor detected: KVM Oct 2 19:05:48.073597 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:05:48.073607 kernel: kvm-clock: cpu 0, msr 62f8a001, primary cpu clock Oct 2 19:05:48.073617 kernel: kvm-clock: using sched offset of 3058294012 cycles Oct 2 19:05:48.073628 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:05:48.073640 kernel: tsc: Detected 2794.748 MHz processor Oct 2 19:05:48.073653 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:05:48.073663 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:05:48.073677 kernel: last_pfn = 0x9cfdd max_arch_pfn = 0x400000000 Oct 2 19:05:48.073690 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:05:48.073699 kernel: Using GB pages for direct mapping Oct 2 19:05:48.073708 kernel: ACPI: Early table checksum verification disabled Oct 2 19:05:48.073717 kernel: ACPI: RSDP 0x00000000000F59C0 000014 (v00 BOCHS ) Oct 2 19:05:48.073725 kernel: ACPI: RSDT 0x000000009CFE1BDD 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:05:48.073740 kernel: ACPI: FACP 0x000000009CFE1A79 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:05:48.073750 kernel: ACPI: DSDT 0x000000009CFE0040 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:05:48.073763 kernel: ACPI: FACS 0x000000009CFE0000 000040 Oct 2 19:05:48.073774 kernel: ACPI: APIC 0x000000009CFE1AED 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:05:48.073788 kernel: ACPI: HPET 0x000000009CFE1B7D 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:05:48.073797 kernel: ACPI: WAET 0x000000009CFE1BB5 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:05:48.073806 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe1a79-0x9cfe1aec] Oct 2 19:05:48.073814 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe1a78] Oct 2 19:05:48.073827 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Oct 2 19:05:48.073838 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe1aed-0x9cfe1b7c] Oct 2 19:05:48.073847 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe1b7d-0x9cfe1bb4] Oct 2 19:05:48.073862 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe1bb5-0x9cfe1bdc] Oct 2 19:05:48.073879 kernel: No NUMA configuration found Oct 2 19:05:48.073889 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdcfff] Oct 2 19:05:48.073909 kernel: NODE_DATA(0) allocated [mem 0x9cfd7000-0x9cfdcfff] Oct 2 19:05:48.073925 kernel: Zone ranges: Oct 2 19:05:48.073935 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:05:48.073950 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdcfff] Oct 2 19:05:48.073965 kernel: Normal empty Oct 2 19:05:48.073974 kernel: Movable zone start for each node Oct 2 19:05:48.073984 kernel: Early memory node ranges Oct 2 19:05:48.073993 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:05:48.074002 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdcfff] Oct 2 19:05:48.074018 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdcfff] Oct 2 19:05:48.074044 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:05:48.074055 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:05:48.074064 kernel: On node 0, zone DMA32: 12323 pages in unavailable ranges Oct 2 19:05:48.074078 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:05:48.074086 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:05:48.074096 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:05:48.074111 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:05:48.074121 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:05:48.074136 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:05:48.074146 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:05:48.074155 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:05:48.074164 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:05:48.074177 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:05:48.074186 kernel: TSC deadline timer available Oct 2 19:05:48.074202 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 2 19:05:48.074211 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 2 19:05:48.074226 kernel: kvm-guest: setup PV sched yield Oct 2 19:05:48.074237 kernel: [mem 0x9d000000-0xfeffbfff] available for PCI devices Oct 2 19:05:48.074247 kernel: Booting paravirtualized kernel on KVM Oct 2 19:05:48.074257 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:05:48.074266 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 2 19:05:48.074281 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Oct 2 19:05:48.074296 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Oct 2 19:05:48.074305 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 2 19:05:48.074334 kernel: kvm-guest: setup async PF for cpu 0 Oct 2 19:05:48.074357 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Oct 2 19:05:48.074366 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:05:48.074381 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:05:48.074392 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632733 Oct 2 19:05:48.074405 kernel: Policy zone: DMA32 Oct 2 19:05:48.074423 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:05:48.074434 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:05:48.074443 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:05:48.074453 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:05:48.074462 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:05:48.074478 kernel: Memory: 2438768K/2571756K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 132728K reserved, 0K cma-reserved) Oct 2 19:05:48.074488 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:05:48.074503 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:05:48.074516 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:05:48.074525 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:05:48.074535 kernel: rcu: RCU event tracing is enabled. Oct 2 19:05:48.074544 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:05:48.074553 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:05:48.074569 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:05:48.074586 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:05:48.074603 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:05:48.074615 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 2 19:05:48.074629 kernel: random: crng init done Oct 2 19:05:48.074638 kernel: Console: colour VGA+ 80x25 Oct 2 19:05:48.074652 kernel: printk: console [ttyS0] enabled Oct 2 19:05:48.074664 kernel: ACPI: Core revision 20210730 Oct 2 19:05:48.074675 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 2 19:05:48.074690 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:05:48.074699 kernel: x2apic enabled Oct 2 19:05:48.074708 kernel: Switched APIC routing to physical x2apic. Oct 2 19:05:48.074718 kernel: kvm-guest: setup PV IPIs Oct 2 19:05:48.074727 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:05:48.074745 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:05:48.074757 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 2 19:05:48.074770 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 2 19:05:48.074782 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 2 19:05:48.074792 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 2 19:05:48.074802 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:05:48.074811 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:05:48.074821 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:05:48.074840 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:05:48.074865 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 2 19:05:48.074877 kernel: RETBleed: Mitigation: untrained return thunk Oct 2 19:05:48.074889 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:05:48.074910 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:05:48.074921 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:05:48.074935 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:05:48.074945 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:05:48.074961 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:05:48.074970 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 2 19:05:48.074982 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:05:48.074991 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:05:48.075000 kernel: LSM: Security Framework initializing Oct 2 19:05:48.075009 kernel: SELinux: Initializing. Oct 2 19:05:48.075024 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:05:48.075033 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:05:48.075042 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 2 19:05:48.075055 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 2 19:05:48.075063 kernel: ... version: 0 Oct 2 19:05:48.075072 kernel: ... bit width: 48 Oct 2 19:05:48.075080 kernel: ... generic registers: 6 Oct 2 19:05:48.075089 kernel: ... value mask: 0000ffffffffffff Oct 2 19:05:48.075098 kernel: ... max period: 00007fffffffffff Oct 2 19:05:48.075113 kernel: ... fixed-purpose events: 0 Oct 2 19:05:48.075125 kernel: ... event mask: 000000000000003f Oct 2 19:05:48.075135 kernel: signal: max sigframe size: 1776 Oct 2 19:05:48.075148 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:05:48.075156 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:05:48.075169 kernel: x86: Booting SMP configuration: Oct 2 19:05:48.075182 kernel: .... node #0, CPUs: #1 Oct 2 19:05:48.075192 kernel: kvm-clock: cpu 1, msr 62f8a041, secondary cpu clock Oct 2 19:05:48.075207 kernel: kvm-guest: setup async PF for cpu 1 Oct 2 19:05:48.075218 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Oct 2 19:05:48.075232 kernel: #2 Oct 2 19:05:48.075245 kernel: kvm-clock: cpu 2, msr 62f8a081, secondary cpu clock Oct 2 19:05:48.075260 kernel: kvm-guest: setup async PF for cpu 2 Oct 2 19:05:48.075270 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Oct 2 19:05:48.075280 kernel: #3 Oct 2 19:05:48.075292 kernel: kvm-clock: cpu 3, msr 62f8a0c1, secondary cpu clock Oct 2 19:05:48.075305 kernel: kvm-guest: setup async PF for cpu 3 Oct 2 19:05:48.075371 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Oct 2 19:05:48.075398 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:05:48.075408 kernel: smpboot: Max logical packages: 1 Oct 2 19:05:48.075418 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 2 19:05:48.075433 kernel: devtmpfs: initialized Oct 2 19:05:48.075442 kernel: x86/mm: Memory block size: 128MB Oct 2 19:05:48.075453 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:05:48.075463 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:05:48.075473 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:05:48.075483 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:05:48.075493 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:05:48.075503 kernel: audit: type=2000 audit(1696273547.045:1): state=initialized audit_enabled=0 res=1 Oct 2 19:05:48.075513 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:05:48.075524 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:05:48.075533 kernel: cpuidle: using governor menu Oct 2 19:05:48.075543 kernel: ACPI: bus type PCI registered Oct 2 19:05:48.075554 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:05:48.075565 kernel: dca service started, version 1.12.1 Oct 2 19:05:48.075577 kernel: PCI: Using configuration type 1 for base access Oct 2 19:05:48.075587 kernel: PCI: Using configuration type 1 for extended access Oct 2 19:05:48.075597 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:05:48.075607 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:05:48.075620 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:05:48.075630 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:05:48.075640 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:05:48.075650 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:05:48.075660 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:05:48.075670 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:05:48.075680 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:05:48.075690 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:05:48.075701 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:05:48.075710 kernel: ACPI: Interpreter enabled Oct 2 19:05:48.075722 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:05:48.075731 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:05:48.075740 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:05:48.075750 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:05:48.075760 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:05:48.075974 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:05:48.075993 kernel: acpiphp: Slot [3] registered Oct 2 19:05:48.076003 kernel: acpiphp: Slot [4] registered Oct 2 19:05:48.076096 kernel: acpiphp: Slot [5] registered Oct 2 19:05:48.076108 kernel: acpiphp: Slot [6] registered Oct 2 19:05:48.076118 kernel: acpiphp: Slot [7] registered Oct 2 19:05:48.076127 kernel: acpiphp: Slot [8] registered Oct 2 19:05:48.076136 kernel: acpiphp: Slot [9] registered Oct 2 19:05:48.076145 kernel: acpiphp: Slot [10] registered Oct 2 19:05:48.076155 kernel: acpiphp: Slot [11] registered Oct 2 19:05:48.076165 kernel: acpiphp: Slot [12] registered Oct 2 19:05:48.076175 kernel: acpiphp: Slot [13] registered Oct 2 19:05:48.076196 kernel: acpiphp: Slot [14] registered Oct 2 19:05:48.076206 kernel: acpiphp: Slot [15] registered Oct 2 19:05:48.076216 kernel: acpiphp: Slot [16] registered Oct 2 19:05:48.076226 kernel: acpiphp: Slot [17] registered Oct 2 19:05:48.076236 kernel: acpiphp: Slot [18] registered Oct 2 19:05:48.076246 kernel: acpiphp: Slot [19] registered Oct 2 19:05:48.076256 kernel: acpiphp: Slot [20] registered Oct 2 19:05:48.076266 kernel: acpiphp: Slot [21] registered Oct 2 19:05:48.076276 kernel: acpiphp: Slot [22] registered Oct 2 19:05:48.076292 kernel: acpiphp: Slot [23] registered Oct 2 19:05:48.076306 kernel: acpiphp: Slot [24] registered Oct 2 19:05:48.076339 kernel: acpiphp: Slot [25] registered Oct 2 19:05:48.076350 kernel: acpiphp: Slot [26] registered Oct 2 19:05:48.076378 kernel: acpiphp: Slot [27] registered Oct 2 19:05:48.076394 kernel: acpiphp: Slot [28] registered Oct 2 19:05:48.076409 kernel: acpiphp: Slot [29] registered Oct 2 19:05:48.076421 kernel: acpiphp: Slot [30] registered Oct 2 19:05:48.076431 kernel: acpiphp: Slot [31] registered Oct 2 19:05:48.076440 kernel: PCI host bridge to bus 0000:00 Oct 2 19:05:48.076629 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:05:48.076760 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:05:48.076889 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:05:48.077028 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Oct 2 19:05:48.077160 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:05:48.077283 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:05:48.077528 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:05:48.077712 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:05:48.077919 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:05:48.078063 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Oct 2 19:05:48.078202 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:05:48.078374 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:05:48.078511 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:05:48.078646 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:05:48.078807 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:05:48.078946 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:05:48.079142 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:05:48.079277 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Oct 2 19:05:48.079425 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Oct 2 19:05:48.079535 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Oct 2 19:05:48.079635 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Oct 2 19:05:48.079736 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:05:48.079870 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:05:48.079995 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Oct 2 19:05:48.080147 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Oct 2 19:05:48.080265 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Oct 2 19:05:48.080410 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:05:48.080521 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:05:48.080634 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Oct 2 19:05:48.080744 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Oct 2 19:05:48.080902 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:05:48.081031 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Oct 2 19:05:48.081141 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Oct 2 19:05:48.081254 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Oct 2 19:05:48.081381 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Oct 2 19:05:48.081398 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:05:48.081408 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:05:48.081418 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:05:48.081427 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:05:48.081443 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:05:48.081453 kernel: iommu: Default domain type: Translated Oct 2 19:05:48.081462 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:05:48.081589 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:05:48.081698 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:05:48.081804 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:05:48.081819 kernel: vgaarb: loaded Oct 2 19:05:48.081828 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:05:48.081837 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:05:48.081845 kernel: PTP clock support registered Oct 2 19:05:48.081853 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:05:48.081866 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:05:48.081874 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:05:48.081883 kernel: e820: reserve RAM buffer [mem 0x9cfdd000-0x9fffffff] Oct 2 19:05:48.081900 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 2 19:05:48.081909 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 2 19:05:48.081917 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:05:48.081925 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:05:48.081934 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:05:48.081944 kernel: pnp: PnP ACPI init Oct 2 19:05:48.082083 kernel: pnp 00:02: [dma 2] Oct 2 19:05:48.082102 kernel: pnp: PnP ACPI: found 6 devices Oct 2 19:05:48.082112 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:05:48.082123 kernel: NET: Registered PF_INET protocol family Oct 2 19:05:48.082134 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:05:48.082145 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:05:48.082155 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:05:48.082165 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:05:48.082180 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:05:48.082191 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:05:48.082201 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:05:48.082212 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:05:48.082221 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:05:48.082231 kernel: NET: Registered PF_XDP protocol family Oct 2 19:05:48.082356 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:05:48.082460 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:05:48.082558 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:05:48.082661 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Oct 2 19:05:48.082765 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:05:48.082878 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:05:48.083131 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:05:48.083252 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:05:48.083267 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:05:48.083277 kernel: Initialise system trusted keyrings Oct 2 19:05:48.083287 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:05:48.083302 kernel: Key type asymmetric registered Oct 2 19:05:48.083344 kernel: Asymmetric key parser 'x509' registered Oct 2 19:05:48.083357 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:05:48.083368 kernel: io scheduler mq-deadline registered Oct 2 19:05:48.083378 kernel: io scheduler kyber registered Oct 2 19:05:48.083388 kernel: io scheduler bfq registered Oct 2 19:05:48.083402 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:05:48.083413 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:05:48.083424 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Oct 2 19:05:48.083438 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:05:48.083449 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:05:48.083460 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:05:48.083469 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:05:48.083479 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:05:48.083488 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:05:48.083624 kernel: rtc_cmos 00:05: RTC can wake from S4 Oct 2 19:05:48.083723 kernel: rtc_cmos 00:05: registered as rtc0 Oct 2 19:05:48.083826 kernel: rtc_cmos 00:05: setting system clock to 2023-10-02T19:05:46 UTC (1696273546) Oct 2 19:05:48.083937 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 2 19:05:48.083953 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:05:48.083963 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:05:48.083973 kernel: Segment Routing with IPv6 Oct 2 19:05:48.083984 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:05:48.083993 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:05:48.084004 kernel: Key type dns_resolver registered Oct 2 19:05:48.084014 kernel: IPI shorthand broadcast: enabled Oct 2 19:05:48.084028 kernel: sched_clock: Marking stable (394218219, 115434211)->(561413972, -51761542) Oct 2 19:05:48.084039 kernel: registered taskstats version 1 Oct 2 19:05:48.084049 kernel: Loading compiled-in X.509 certificates Oct 2 19:05:48.084059 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:05:48.084069 kernel: Key type .fscrypt registered Oct 2 19:05:48.084082 kernel: Key type fscrypt-provisioning registered Oct 2 19:05:48.084093 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:05:48.084103 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:05:48.084111 kernel: ima: No architecture policies found Oct 2 19:05:48.084125 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:05:48.084139 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:05:48.084150 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:05:48.084160 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:05:48.084169 kernel: Run /init as init process Oct 2 19:05:48.084178 kernel: with arguments: Oct 2 19:05:48.084188 kernel: /init Oct 2 19:05:48.084198 kernel: with environment: Oct 2 19:05:48.084222 kernel: HOME=/ Oct 2 19:05:48.084235 kernel: TERM=linux Oct 2 19:05:48.084245 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:05:48.084258 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:05:48.084271 systemd[1]: Detected virtualization kvm. Oct 2 19:05:48.084282 systemd[1]: Detected architecture x86-64. Oct 2 19:05:48.084291 systemd[1]: Running in initrd. Oct 2 19:05:48.084302 systemd[1]: No hostname configured, using default hostname. Oct 2 19:05:48.084325 systemd[1]: Hostname set to . Oct 2 19:05:48.084336 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:05:48.084350 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:05:48.084360 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:05:48.084370 systemd[1]: Reached target cryptsetup.target. Oct 2 19:05:48.084380 systemd[1]: Reached target paths.target. Oct 2 19:05:48.084390 systemd[1]: Reached target slices.target. Oct 2 19:05:48.084400 systemd[1]: Reached target swap.target. Oct 2 19:05:48.084414 systemd[1]: Reached target timers.target. Oct 2 19:05:48.084426 systemd[1]: Listening on iscsid.socket. Oct 2 19:05:48.084437 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:05:48.084448 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:05:48.084459 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:05:48.084470 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:05:48.084481 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:05:48.084493 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:05:48.084507 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:05:48.084519 systemd[1]: Reached target sockets.target. Oct 2 19:05:48.084530 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:05:48.084541 systemd[1]: Finished network-cleanup.service. Oct 2 19:05:48.084553 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:05:48.084564 systemd[1]: Starting systemd-journald.service... Oct 2 19:05:48.084575 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:05:48.084589 systemd[1]: Starting systemd-resolved.service... Oct 2 19:05:48.084600 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:05:48.084611 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:05:48.084621 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:05:48.084637 systemd-journald[198]: Journal started Oct 2 19:05:48.084704 systemd-journald[198]: Runtime Journal (/run/log/journal/eaac289f974b4addb83fad72f9f8c8e5) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:05:48.056926 systemd-modules-load[199]: Inserted module 'overlay' Oct 2 19:05:48.100418 systemd[1]: Started systemd-journald.service. Oct 2 19:05:48.100469 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:05:48.100501 kernel: audit: type=1130 audit(1696273548.096:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.108118 kernel: Bridge firewalling registered Oct 2 19:05:48.110364 kernel: audit: type=1130 audit(1696273548.107:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.110555 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:05:48.130521 kernel: audit: type=1130 audit(1696273548.113:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.111826 systemd-modules-load[199]: Inserted module 'br_netfilter' Oct 2 19:05:48.116253 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:05:48.122095 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:05:48.153343 kernel: SCSI subsystem initialized Oct 2 19:05:48.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.159276 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:05:48.165927 kernel: audit: type=1130 audit(1696273548.158:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.177126 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:05:48.188331 kernel: audit: type=1130 audit(1696273548.177:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.178815 systemd-resolved[200]: Positive Trust Anchors: Oct 2 19:05:48.178833 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:05:48.195382 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:05:48.195421 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:05:48.195435 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:05:48.178870 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:05:48.182994 systemd-resolved[200]: Defaulting to hostname 'linux'. Oct 2 19:05:48.211072 dracut-cmdline[217]: dracut-dracut-053 Oct 2 19:05:48.211072 dracut-cmdline[217]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:05:48.221184 kernel: audit: type=1130 audit(1696273548.211:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.183943 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:05:48.211433 systemd[1]: Started systemd-resolved.service. Oct 2 19:05:48.211755 systemd[1]: Reached target nss-lookup.target. Oct 2 19:05:48.224813 systemd-modules-load[199]: Inserted module 'dm_multipath' Oct 2 19:05:48.226208 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:05:48.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.235350 kernel: audit: type=1130 audit(1696273548.229:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.233103 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:05:48.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.249821 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:05:48.260516 kernel: audit: type=1130 audit(1696273548.250:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.322351 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:05:48.350656 kernel: iscsi: registered transport (tcp) Oct 2 19:05:48.397742 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:05:48.397849 kernel: QLogic iSCSI HBA Driver Oct 2 19:05:48.456735 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:05:48.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.460071 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:05:48.463985 kernel: audit: type=1130 audit(1696273548.455:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.579006 kernel: raid6: avx2x4 gen() 21426 MB/s Oct 2 19:05:48.596918 kernel: raid6: avx2x4 xor() 5406 MB/s Oct 2 19:05:48.613956 kernel: raid6: avx2x2 gen() 20419 MB/s Oct 2 19:05:48.629888 kernel: raid6: avx2x2 xor() 14731 MB/s Oct 2 19:05:48.646896 kernel: raid6: avx2x1 gen() 17104 MB/s Oct 2 19:05:48.679487 kernel: raid6: avx2x1 xor() 11181 MB/s Oct 2 19:05:48.702418 kernel: raid6: sse2x4 gen() 11178 MB/s Oct 2 19:05:48.714764 kernel: raid6: sse2x4 xor() 3979 MB/s Oct 2 19:05:48.734391 kernel: raid6: sse2x2 gen() 11387 MB/s Oct 2 19:05:48.749218 kernel: raid6: sse2x2 xor() 6897 MB/s Oct 2 19:05:48.765368 kernel: raid6: sse2x1 gen() 9188 MB/s Oct 2 19:05:48.782380 kernel: raid6: sse2x1 xor() 6238 MB/s Oct 2 19:05:48.782471 kernel: raid6: using algorithm avx2x4 gen() 21426 MB/s Oct 2 19:05:48.782485 kernel: raid6: .... xor() 5406 MB/s, rmw enabled Oct 2 19:05:48.783365 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:05:48.809924 kernel: xor: automatically using best checksumming function avx Oct 2 19:05:48.920368 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:05:48.934439 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:05:48.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.937000 audit: BPF prog-id=7 op=LOAD Oct 2 19:05:48.937000 audit: BPF prog-id=8 op=LOAD Oct 2 19:05:48.937984 systemd[1]: Starting systemd-udevd.service... Oct 2 19:05:48.953858 systemd-udevd[401]: Using default interface naming scheme 'v252'. Oct 2 19:05:48.958522 systemd[1]: Started systemd-udevd.service. Oct 2 19:05:48.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:48.960810 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:05:48.972062 dracut-pre-trigger[404]: rd.md=0: removing MD RAID activation Oct 2 19:05:49.000643 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:05:49.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:49.003355 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:05:49.056922 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:05:49.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:49.089339 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:05:49.095349 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:05:49.109361 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:05:49.111337 kernel: libata version 3.00 loaded. Oct 2 19:05:49.115904 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:05:49.115955 kernel: AES CTR mode by8 optimization enabled Oct 2 19:05:49.115968 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:05:49.118710 kernel: scsi host0: ata_piix Oct 2 19:05:49.118912 kernel: scsi host1: ata_piix Oct 2 19:05:49.119038 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Oct 2 19:05:49.119049 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Oct 2 19:05:49.159884 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:05:49.163453 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (447) Oct 2 19:05:49.170970 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:05:49.188044 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:05:49.190956 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:05:49.197245 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:05:49.200709 systemd[1]: Starting disk-uuid.service... Oct 2 19:05:49.279877 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 2 19:05:49.282340 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 2 19:05:49.343708 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 2 19:05:49.344130 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:05:49.364905 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Oct 2 19:05:50.470442 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:05:50.471959 disk-uuid[515]: The operation has completed successfully. Oct 2 19:05:50.543339 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:05:50.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:50.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:50.543479 systemd[1]: Finished disk-uuid.service. Oct 2 19:05:50.616102 systemd[1]: Starting verity-setup.service... Oct 2 19:05:50.722336 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:05:50.901250 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:05:50.903775 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:05:50.908846 systemd[1]: Finished verity-setup.service. Oct 2 19:05:50.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.095394 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:05:51.095761 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:05:51.096820 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:05:51.097871 systemd[1]: Starting ignition-setup.service... Oct 2 19:05:51.100114 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:05:51.109801 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:05:51.109920 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:05:51.109935 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:05:51.121868 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:05:51.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.186926 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:05:51.189000 audit: BPF prog-id=9 op=LOAD Oct 2 19:05:51.190610 systemd[1]: Starting systemd-networkd.service... Oct 2 19:05:51.225347 systemd-networkd[687]: lo: Link UP Oct 2 19:05:51.225356 systemd-networkd[687]: lo: Gained carrier Oct 2 19:05:51.225978 systemd-networkd[687]: Enumeration completed Oct 2 19:05:51.226106 systemd[1]: Started systemd-networkd.service. Oct 2 19:05:51.261938 kernel: kauditd_printk_skb: 11 callbacks suppressed Oct 2 19:05:51.261966 kernel: audit: type=1130 audit(1696273551.256:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.226268 systemd-networkd[687]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:05:51.256623 systemd-networkd[687]: eth0: Link UP Oct 2 19:05:51.256628 systemd-networkd[687]: eth0: Gained carrier Oct 2 19:05:51.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.256839 systemd[1]: Reached target network.target. Oct 2 19:05:51.268271 kernel: audit: type=1130 audit(1696273551.264:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.259119 systemd[1]: Starting iscsiuio.service... Oct 2 19:05:51.263553 systemd[1]: Started iscsiuio.service. Oct 2 19:05:51.269640 iscsid[692]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:05:51.269640 iscsid[692]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 19:05:51.269640 iscsid[692]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:05:51.269640 iscsid[692]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:05:51.269640 iscsid[692]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:05:51.269640 iscsid[692]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:05:51.269640 iscsid[692]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:05:51.282097 kernel: audit: type=1130 audit(1696273551.270:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.265294 systemd[1]: Starting iscsid.service... Oct 2 19:05:51.270502 systemd[1]: Started iscsid.service. Oct 2 19:05:51.271965 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:05:51.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.282421 systemd-networkd[687]: eth0: DHCPv4 address 10.0.0.35/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:05:51.288425 kernel: audit: type=1130 audit(1696273551.284:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.283778 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:05:51.285002 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:05:51.287025 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:05:51.288598 systemd[1]: Reached target remote-fs.target. Oct 2 19:05:51.291193 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:05:51.300165 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:05:51.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.304349 kernel: audit: type=1130 audit(1696273551.299:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.527063 systemd[1]: Finished ignition-setup.service. Oct 2 19:05:51.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.529198 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:05:51.533028 kernel: audit: type=1130 audit(1696273551.527:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.724842 ignition[707]: Ignition 2.14.0 Oct 2 19:05:51.724856 ignition[707]: Stage: fetch-offline Oct 2 19:05:51.725124 ignition[707]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:05:51.725134 ignition[707]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:05:51.725253 ignition[707]: parsed url from cmdline: "" Oct 2 19:05:51.725257 ignition[707]: no config URL provided Oct 2 19:05:51.725261 ignition[707]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:05:51.725268 ignition[707]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:05:51.725287 ignition[707]: op(1): [started] loading QEMU firmware config module Oct 2 19:05:51.725292 ignition[707]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:05:51.735232 ignition[707]: op(1): [finished] loading QEMU firmware config module Oct 2 19:05:51.769474 ignition[707]: parsing config with SHA512: f9b30f317f444f439e9b69c5f08dcff39a47b3711eafc126bc10e93685b413e7288028e8451a4ea7556693c80e49375e28f5e27d4c8d1d3105671c39f72ea6dd Oct 2 19:05:51.802141 unknown[707]: fetched base config from "system" Oct 2 19:05:51.802155 unknown[707]: fetched user config from "qemu" Oct 2 19:05:51.802726 ignition[707]: fetch-offline: fetch-offline passed Oct 2 19:05:51.802813 ignition[707]: Ignition finished successfully Oct 2 19:05:51.806025 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:05:51.810703 kernel: audit: type=1130 audit(1696273551.806:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.806817 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:05:51.807574 systemd[1]: Starting ignition-kargs.service... Oct 2 19:05:51.819569 ignition[715]: Ignition 2.14.0 Oct 2 19:05:51.819582 ignition[715]: Stage: kargs Oct 2 19:05:51.819700 ignition[715]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:05:51.819712 ignition[715]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:05:51.821087 ignition[715]: kargs: kargs passed Oct 2 19:05:51.823139 systemd[1]: Finished ignition-kargs.service. Oct 2 19:05:51.827900 kernel: audit: type=1130 audit(1696273551.823:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.821145 ignition[715]: Ignition finished successfully Oct 2 19:05:51.825577 systemd[1]: Starting ignition-disks.service... Oct 2 19:05:51.835097 ignition[721]: Ignition 2.14.0 Oct 2 19:05:51.835110 ignition[721]: Stage: disks Oct 2 19:05:51.835246 ignition[721]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:05:51.835260 ignition[721]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:05:51.836685 ignition[721]: disks: disks passed Oct 2 19:05:51.841994 kernel: audit: type=1130 audit(1696273551.838:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:51.837843 systemd[1]: Finished ignition-disks.service. Oct 2 19:05:51.836741 ignition[721]: Ignition finished successfully Oct 2 19:05:51.838588 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:05:51.842025 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:05:51.842592 systemd[1]: Reached target local-fs.target. Oct 2 19:05:51.843195 systemd[1]: Reached target sysinit.target. Oct 2 19:05:51.844204 systemd[1]: Reached target basic.target. Oct 2 19:05:51.845806 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:05:51.857379 systemd-fsck[729]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:05:52.309020 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:05:52.314549 kernel: audit: type=1130 audit(1696273552.309:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:52.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:52.310929 systemd[1]: Mounting sysroot.mount... Oct 2 19:05:52.379366 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:05:52.380254 systemd[1]: Mounted sysroot.mount. Oct 2 19:05:52.381130 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:05:52.383640 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:05:52.384658 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:05:52.384709 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:05:52.384741 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:05:52.417579 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:05:52.423636 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:05:52.424546 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:05:52.430902 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (735) Oct 2 19:05:52.430987 initrd-setup-root[740]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:05:52.451727 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:05:52.451760 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:05:52.451784 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:05:52.454236 initrd-setup-root[766]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:05:52.456265 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:05:52.459513 initrd-setup-root[774]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:05:52.463666 initrd-setup-root[782]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:05:52.503329 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:05:52.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:52.506776 systemd[1]: Starting ignition-mount.service... Oct 2 19:05:52.509744 systemd[1]: Starting sysroot-boot.service... Oct 2 19:05:52.516735 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:05:52.516900 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:05:52.541444 systemd[1]: Finished sysroot-boot.service. Oct 2 19:05:52.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:52.621791 ignition[804]: INFO : Ignition 2.14.0 Oct 2 19:05:52.621791 ignition[804]: INFO : Stage: mount Oct 2 19:05:52.623453 ignition[804]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:05:52.623453 ignition[804]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:05:52.626275 ignition[804]: INFO : mount: mount passed Oct 2 19:05:52.626968 ignition[804]: INFO : Ignition finished successfully Oct 2 19:05:52.628514 systemd[1]: Finished ignition-mount.service. Oct 2 19:05:52.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:52.629791 systemd[1]: Starting ignition-files.service... Oct 2 19:05:52.638845 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:05:52.647230 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (811) Oct 2 19:05:52.647350 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:05:52.647368 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:05:52.647881 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:05:52.653374 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:05:52.664301 ignition[830]: INFO : Ignition 2.14.0 Oct 2 19:05:52.664301 ignition[830]: INFO : Stage: files Oct 2 19:05:52.665773 ignition[830]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:05:52.665773 ignition[830]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:05:52.667222 ignition[830]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:05:52.668552 ignition[830]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:05:52.668552 ignition[830]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:05:52.671281 ignition[830]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:05:52.672477 ignition[830]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:05:52.672477 ignition[830]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:05:52.672272 unknown[830]: wrote ssh authorized keys file for user: core Oct 2 19:05:52.675103 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:05:52.675103 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:05:52.929713 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:05:52.976496 systemd-networkd[687]: eth0: Gained IPv6LL Oct 2 19:05:53.104702 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:05:53.104702 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:05:53.122845 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:05:53.122845 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:05:53.204484 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:05:53.284210 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:05:53.286575 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:05:53.286575 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:05:53.286575 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:05:53.443600 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:05:54.419786 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f4daad200c8378dfdc6cb69af28eaca4215f2b4a2dbdf75f29f9210171cb5683bc873fc000319022e6b3ad61175475d77190734713ba9136644394e8a8faafa1 Oct 2 19:05:54.419786 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:05:54.419786 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:05:54.419786 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:05:54.580288 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:05:57.202184 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: ce6ba764274162d38ac1c44e1fb1f0f835346f3afc5b508bb755b1b7d7170910f5812b0a1941b32e29d950e905bbd08ae761c87befad921db4d44969c8562e75 Oct 2 19:05:57.204445 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:05:57.204445 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:05:57.204445 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:05:57.268226 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:05:57.990830 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 33cf3f6e37bcee4dff7ce14ab933c605d07353d4e31446dd2b52c3f05e0b150b60e531f6069f112d8a76331322a72b593537531e62104cfc7c70cb03d46f76b3 Oct 2 19:05:57.993581 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:05:57.993581 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:05:57.993581 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:05:57.993581 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:05:57.993581 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:05:57.993581 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:05:57.993581 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(b): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(b): op(c): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(b): op(c): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(b): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(d): [started] processing unit "prepare-critools.service" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(d): op(e): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(d): op(e): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(d): [finished] processing unit "prepare-critools.service" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(f): [started] processing unit "coreos-metadata.service" Oct 2 19:05:57.993581 ignition[830]: INFO : files: op(f): op(10): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:05:58.013887 ignition[830]: INFO : files: op(f): op(10): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:05:58.013887 ignition[830]: INFO : files: op(f): [finished] processing unit "coreos-metadata.service" Oct 2 19:05:58.013887 ignition[830]: INFO : files: op(11): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:05:58.013887 ignition[830]: INFO : files: op(11): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:05:58.013887 ignition[830]: INFO : files: op(12): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:05:58.013887 ignition[830]: INFO : files: op(12): op(13): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:05:58.071818 ignition[830]: INFO : files: op(12): op(13): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:05:58.071818 ignition[830]: INFO : files: op(12): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:05:58.071818 ignition[830]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:05:58.076431 ignition[830]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:05:58.076431 ignition[830]: INFO : files: createResultFile: createFiles: op(15): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:05:58.076431 ignition[830]: INFO : files: createResultFile: createFiles: op(15): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:05:58.076431 ignition[830]: INFO : files: files passed Oct 2 19:05:58.076431 ignition[830]: INFO : Ignition finished successfully Oct 2 19:05:58.085762 systemd[1]: Finished ignition-files.service. Oct 2 19:05:58.106528 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 19:05:58.106571 kernel: audit: type=1130 audit(1696273558.086:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.106635 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:05:58.106862 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:05:58.108039 systemd[1]: Starting ignition-quench.service... Oct 2 19:05:58.111081 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:05:58.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.111201 systemd[1]: Finished ignition-quench.service. Oct 2 19:05:58.119670 kernel: audit: type=1130 audit(1696273558.112:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.119707 kernel: audit: type=1131 audit(1696273558.112:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.119776 initrd-setup-root-after-ignition[855]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:05:58.121282 initrd-setup-root-after-ignition[857]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:05:58.121453 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:05:58.127434 kernel: audit: type=1130 audit(1696273558.123:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.123799 systemd[1]: Reached target ignition-complete.target. Oct 2 19:05:58.128231 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:05:58.146388 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:05:58.146533 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:05:58.154072 kernel: audit: type=1130 audit(1696273558.147:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.154742 kernel: audit: type=1131 audit(1696273558.147:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.148258 systemd[1]: Reached target initrd-fs.target. Oct 2 19:05:58.154048 systemd[1]: Reached target initrd.target. Oct 2 19:05:58.154855 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:05:58.155844 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:05:58.170086 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:05:58.174594 kernel: audit: type=1130 audit(1696273558.170:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.172155 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:05:58.182846 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:05:58.183757 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:05:58.185245 systemd[1]: Stopped target timers.target. Oct 2 19:05:58.212416 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:05:58.218071 kernel: audit: type=1131 audit(1696273558.213:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.212631 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:05:58.214048 systemd[1]: Stopped target initrd.target. Oct 2 19:05:58.218215 systemd[1]: Stopped target basic.target. Oct 2 19:05:58.219667 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:05:58.221058 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:05:58.222464 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:05:58.224116 systemd[1]: Stopped target remote-fs.target. Oct 2 19:05:58.225545 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:05:58.227394 systemd[1]: Stopped target sysinit.target. Oct 2 19:05:58.228735 systemd[1]: Stopped target local-fs.target. Oct 2 19:05:58.230250 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:05:58.231600 systemd[1]: Stopped target swap.target. Oct 2 19:05:58.237961 kernel: audit: type=1131 audit(1696273558.233:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.232907 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:05:58.233068 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:05:58.243376 kernel: audit: type=1131 audit(1696273558.239:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.234438 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:05:58.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.238031 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:05:58.238209 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:05:58.239755 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:05:58.239901 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:05:58.243654 systemd[1]: Stopped target paths.target. Oct 2 19:05:58.244851 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:05:58.248437 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:05:58.249729 systemd[1]: Stopped target slices.target. Oct 2 19:05:58.250791 systemd[1]: Stopped target sockets.target. Oct 2 19:05:58.252115 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:05:58.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.252226 systemd[1]: Closed iscsid.socket. Oct 2 19:05:58.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.253411 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:05:58.253587 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:05:58.254814 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:05:58.254932 systemd[1]: Stopped ignition-files.service. Oct 2 19:05:58.257072 systemd[1]: Stopping ignition-mount.service... Oct 2 19:05:58.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.258225 systemd[1]: Stopping iscsiuio.service... Oct 2 19:05:58.259826 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:05:58.260811 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:05:58.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.261010 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:05:58.261931 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:05:58.262049 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:05:58.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.269364 ignition[870]: INFO : Ignition 2.14.0 Oct 2 19:05:58.269364 ignition[870]: INFO : Stage: umount Oct 2 19:05:58.269364 ignition[870]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:05:58.269364 ignition[870]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:05:58.269364 ignition[870]: INFO : umount: umount passed Oct 2 19:05:58.269364 ignition[870]: INFO : Ignition finished successfully Oct 2 19:05:58.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.264716 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:05:58.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.264823 systemd[1]: Stopped iscsiuio.service. Oct 2 19:05:58.267757 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:05:58.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.267838 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:05:58.269926 systemd[1]: Stopped target network.target. Oct 2 19:05:58.271584 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:05:58.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.271661 systemd[1]: Closed iscsiuio.socket. Oct 2 19:05:58.306000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:05:58.273067 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:05:58.274653 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:05:58.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.277832 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:05:58.278546 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:05:58.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.278676 systemd[1]: Stopped ignition-mount.service. Oct 2 19:05:58.280169 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:05:58.280265 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:05:58.280507 systemd-networkd[687]: eth0: DHCPv6 lease lost Oct 2 19:05:58.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.335000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:05:58.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.281790 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:05:58.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.281899 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:05:58.284300 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:05:58.284492 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:05:58.306483 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:05:58.306544 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:05:58.308912 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:05:58.309012 systemd[1]: Stopped ignition-disks.service. Oct 2 19:05:58.310428 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:05:58.310487 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:05:58.311662 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:05:58.311717 systemd[1]: Stopped ignition-setup.service. Oct 2 19:05:58.313237 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:05:58.313354 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:05:58.315940 systemd[1]: Stopping network-cleanup.service... Oct 2 19:05:58.316999 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:05:58.317068 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:05:58.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.335615 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:05:58.335702 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:05:58.337121 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:05:58.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.337172 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:05:58.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.338053 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:05:58.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.340480 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:05:58.350535 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:05:58.350735 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:05:58.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.352053 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:05:58.352156 systemd[1]: Stopped network-cleanup.service. Oct 2 19:05:58.353182 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:05:58.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:58.353216 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:05:58.354383 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:05:58.354420 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:05:58.355366 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:05:58.355404 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:05:58.356515 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:05:58.356547 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:05:58.357568 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:05:58.357599 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:05:58.359294 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:05:58.360121 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:05:58.360164 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:05:58.367021 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:05:58.367096 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:05:58.368134 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:05:58.368189 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:05:58.369788 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:05:58.370233 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:05:58.370341 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:05:58.371478 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:05:58.373770 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:05:58.392203 systemd[1]: Switching root. Oct 2 19:05:58.417918 systemd-journald[198]: Journal stopped Oct 2 19:06:02.262834 systemd-journald[198]: Received SIGTERM from PID 1 (n/a). Oct 2 19:06:02.262931 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:06:02.262953 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:06:02.262970 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:06:02.262994 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:06:02.263012 kernel: SELinux: policy capability open_perms=1 Oct 2 19:06:02.263028 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:06:02.263042 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:06:02.263056 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:06:02.263070 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:06:02.263084 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:06:02.263098 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:06:02.263113 systemd[1]: Successfully loaded SELinux policy in 60.106ms. Oct 2 19:06:02.263142 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 11.912ms. Oct 2 19:06:02.263159 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:06:02.263174 systemd[1]: Detected virtualization kvm. Oct 2 19:06:02.263188 systemd[1]: Detected architecture x86-64. Oct 2 19:06:02.263206 systemd[1]: Detected first boot. Oct 2 19:06:02.263221 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:06:02.263236 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:06:02.263252 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:06:02.263273 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:06:02.263290 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:06:02.263347 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:06:02.263365 systemd[1]: Stopped iscsid.service. Oct 2 19:06:02.263381 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:06:02.263395 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:06:02.263410 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:06:02.263428 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:06:02.263443 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:06:02.263458 systemd[1]: Created slice system-getty.slice. Oct 2 19:06:02.263473 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:06:02.263489 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:06:02.263514 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:06:02.263529 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:06:02.263544 systemd[1]: Created slice user.slice. Oct 2 19:06:02.263559 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:06:02.263576 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:06:02.263912 systemd[1]: Set up automount boot.automount. Oct 2 19:06:02.263939 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:06:02.263954 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:06:02.263970 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:06:02.263984 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:06:02.263998 systemd[1]: Reached target integritysetup.target. Oct 2 19:06:02.264013 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:06:02.264037 systemd[1]: Reached target remote-fs.target. Oct 2 19:06:02.264053 systemd[1]: Reached target slices.target. Oct 2 19:06:02.264074 systemd[1]: Reached target swap.target. Oct 2 19:06:02.264088 systemd[1]: Reached target torcx.target. Oct 2 19:06:02.264103 systemd[1]: Reached target veritysetup.target. Oct 2 19:06:02.264117 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:06:02.264131 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:06:02.264145 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:06:02.264159 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:06:02.264173 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:06:02.264190 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:06:02.264203 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:06:02.264219 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:06:02.264233 systemd[1]: Mounting media.mount... Oct 2 19:06:02.264248 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:06:02.264263 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:06:02.264278 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:06:02.264293 systemd[1]: Mounting tmp.mount... Oct 2 19:06:02.264307 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:06:02.264342 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:06:02.264359 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:06:02.264372 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:06:02.264387 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:06:02.264401 systemd[1]: Starting modprobe@drm.service... Oct 2 19:06:02.264416 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:06:02.264431 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:06:02.264444 systemd[1]: Starting modprobe@loop.service... Oct 2 19:06:02.264459 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:06:02.264475 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:06:02.264488 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:06:02.264512 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:06:02.264527 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:06:02.264541 systemd[1]: Stopped systemd-journald.service. Oct 2 19:06:02.264554 systemd[1]: Starting systemd-journald.service... Oct 2 19:06:02.264568 kernel: loop: module loaded Oct 2 19:06:02.264582 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:06:02.264596 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:06:02.264613 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:06:02.264627 kernel: fuse: init (API version 7.34) Oct 2 19:06:02.264641 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:06:02.264656 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:06:02.264670 systemd[1]: Stopped verity-setup.service. Oct 2 19:06:02.264684 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:06:02.264699 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:06:02.264714 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:06:02.264729 systemd[1]: Mounted media.mount. Oct 2 19:06:02.264746 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:06:02.264762 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:06:02.264777 systemd[1]: Mounted tmp.mount. Oct 2 19:06:02.264791 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:06:02.264807 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:06:02.264821 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:06:02.264837 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:06:02.264856 systemd-journald[977]: Journal started Oct 2 19:06:02.264915 systemd-journald[977]: Runtime Journal (/run/log/journal/eaac289f974b4addb83fad72f9f8c8e5) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:05:58.659000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:05:59.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:05:59.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:05:59.211000 audit: BPF prog-id=10 op=LOAD Oct 2 19:05:59.211000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:05:59.211000 audit: BPF prog-id=11 op=LOAD Oct 2 19:05:59.211000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:06:02.133000 audit: BPF prog-id=12 op=LOAD Oct 2 19:06:02.133000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:06:02.133000 audit: BPF prog-id=13 op=LOAD Oct 2 19:06:02.133000 audit: BPF prog-id=14 op=LOAD Oct 2 19:06:02.133000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:06:02.133000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:06:02.135000 audit: BPF prog-id=15 op=LOAD Oct 2 19:06:02.135000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:06:02.135000 audit: BPF prog-id=16 op=LOAD Oct 2 19:06:02.135000 audit: BPF prog-id=17 op=LOAD Oct 2 19:06:02.135000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:06:02.135000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:06:02.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.265654 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:06:02.140000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.148000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:06:02.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.227000 audit: BPF prog-id=18 op=LOAD Oct 2 19:06:02.227000 audit: BPF prog-id=19 op=LOAD Oct 2 19:06:02.227000 audit: BPF prog-id=20 op=LOAD Oct 2 19:06:02.227000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:06:02.227000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:06:02.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.258000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:06:02.258000 audit[977]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffdcec01980 a2=4000 a3=7ffdcec01a1c items=0 ppid=1 pid=977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:02.258000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:06:02.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:59.279328 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:06:02.132032 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:06:02.267921 systemd[1]: Started systemd-journald.service. Oct 2 19:06:02.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:59.279650 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:06:02.132045 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:05:59.279700 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:06:02.136441 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:05:59.279741 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:06:02.268156 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:05:59.279755 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:06:02.268381 systemd[1]: Finished modprobe@drm.service. Oct 2 19:05:59.279805 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:05:59.279823 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:05:59.280069 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:06:02.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:59.280109 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:05:59.280125 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:05:59.280508 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:06:02.269505 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:05:59.280550 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:05:59.280592 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:06:02.269712 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:05:59.280612 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:05:59.280632 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:05:59.280649 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:05:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:06:01.784764 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:06:01Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:06:01.785204 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:06:01Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:06:01.785385 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:06:01Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:06:02.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:01.785631 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:06:01Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:06:01.785701 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:06:01Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:06:01.785785 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2023-10-02T19:06:01Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:06:02.271215 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:06:02.271585 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:06:02.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.272916 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:06:02.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.273924 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:06:02.274176 systemd[1]: Finished modprobe@loop.service. Oct 2 19:06:02.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.275392 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:06:02.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.276529 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:06:02.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.278463 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:06:02.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.279814 systemd[1]: Reached target network-pre.target. Oct 2 19:06:02.282577 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:06:02.284510 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:06:02.285679 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:06:02.287811 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:06:02.289973 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:06:02.290890 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:06:02.291966 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:06:02.292863 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:06:02.294038 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:06:02.295967 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:06:02.300058 systemd-journald[977]: Time spent on flushing to /var/log/journal/eaac289f974b4addb83fad72f9f8c8e5 is 24.287ms for 1111 entries. Oct 2 19:06:02.300058 systemd-journald[977]: System Journal (/var/log/journal/eaac289f974b4addb83fad72f9f8c8e5) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:06:02.337165 systemd-journald[977]: Received client request to flush runtime journal. Oct 2 19:06:02.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.300112 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:06:02.302409 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:06:02.338683 udevadm[1008]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:06:02.303449 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:06:02.304492 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:06:02.311791 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:06:02.314284 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:06:02.316851 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:06:02.317977 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:06:02.320127 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:06:02.338423 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:06:02.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.347559 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:06:02.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.994336 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:06:02.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:02.996000 audit: BPF prog-id=21 op=LOAD Oct 2 19:06:02.996000 audit: BPF prog-id=22 op=LOAD Oct 2 19:06:02.996000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:06:02.996000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:06:02.997811 systemd[1]: Starting systemd-udevd.service... Oct 2 19:06:03.025842 systemd-udevd[1012]: Using default interface naming scheme 'v252'. Oct 2 19:06:03.071099 systemd[1]: Started systemd-udevd.service. Oct 2 19:06:03.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:03.081000 audit: BPF prog-id=23 op=LOAD Oct 2 19:06:03.082863 systemd[1]: Starting systemd-networkd.service... Oct 2 19:06:03.101000 audit: BPF prog-id=24 op=LOAD Oct 2 19:06:03.103386 kernel: kauditd_printk_skb: 99 callbacks suppressed Oct 2 19:06:03.103463 kernel: audit: type=1334 audit(1696273563.101:142): prog-id=24 op=LOAD Oct 2 19:06:03.103000 audit: BPF prog-id=25 op=LOAD Oct 2 19:06:03.105244 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:06:03.105598 kernel: audit: type=1334 audit(1696273563.103:143): prog-id=25 op=LOAD Oct 2 19:06:03.105648 kernel: audit: type=1334 audit(1696273563.104:144): prog-id=26 op=LOAD Oct 2 19:06:03.104000 audit: BPF prog-id=26 op=LOAD Oct 2 19:06:03.125879 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:06:03.154747 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:06:03.160855 systemd[1]: Started systemd-userdbd.service. Oct 2 19:06:03.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:03.165333 kernel: audit: type=1130 audit(1696273563.161:145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:03.180334 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:06:03.185399 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:06:03.197000 audit[1026]: AVC avc: denied { confidentiality } for pid=1026 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:06:03.210344 kernel: audit: type=1400 audit(1696273563.197:146): avc: denied { confidentiality } for pid=1026 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:06:03.197000 audit[1026]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5654962c7480 a1=32194 a2=7f0a4cb60bc5 a3=5 items=106 ppid=1012 pid=1026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:03.197000 audit: CWD cwd="/" Oct 2 19:06:03.197000 audit: PATH item=0 name=(null) inode=11909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.223723 kernel: audit: type=1300 audit(1696273563.197:146): arch=c000003e syscall=175 success=yes exit=0 a0=5654962c7480 a1=32194 a2=7f0a4cb60bc5 a3=5 items=106 ppid=1012 pid=1026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:03.223801 kernel: audit: type=1307 audit(1696273563.197:146): cwd="/" Oct 2 19:06:03.223831 kernel: audit: type=1302 audit(1696273563.197:146): item=0 name=(null) inode=11909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=1 name=(null) inode=11910 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.226539 kernel: audit: type=1302 audit(1696273563.197:146): item=1 name=(null) inode=11910 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=2 name=(null) inode=11909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=3 name=(null) inode=11911 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=4 name=(null) inode=11909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=5 name=(null) inode=11912 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=6 name=(null) inode=11912 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=7 name=(null) inode=11913 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=8 name=(null) inode=11912 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=9 name=(null) inode=11914 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.232340 kernel: audit: type=1302 audit(1696273563.197:146): item=2 name=(null) inode=11909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=10 name=(null) inode=11912 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=11 name=(null) inode=11915 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=12 name=(null) inode=11912 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=13 name=(null) inode=11916 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=14 name=(null) inode=11912 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=15 name=(null) inode=11917 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=16 name=(null) inode=11909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=17 name=(null) inode=11918 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=18 name=(null) inode=11918 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=19 name=(null) inode=11919 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=20 name=(null) inode=11918 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=21 name=(null) inode=11920 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=22 name=(null) inode=11918 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=23 name=(null) inode=11921 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=24 name=(null) inode=11918 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=25 name=(null) inode=11922 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=26 name=(null) inode=11918 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=27 name=(null) inode=11923 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=28 name=(null) inode=11909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=29 name=(null) inode=11924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=30 name=(null) inode=11924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=31 name=(null) inode=11925 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=32 name=(null) inode=11924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=33 name=(null) inode=11926 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=34 name=(null) inode=11924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=35 name=(null) inode=11927 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=36 name=(null) inode=11924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=37 name=(null) inode=11928 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=38 name=(null) inode=11924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=39 name=(null) inode=11929 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=40 name=(null) inode=11909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=41 name=(null) inode=11930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=42 name=(null) inode=11930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=43 name=(null) inode=11931 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=44 name=(null) inode=11930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=45 name=(null) inode=11932 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=46 name=(null) inode=11930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=47 name=(null) inode=11933 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=48 name=(null) inode=11930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=49 name=(null) inode=11934 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=50 name=(null) inode=11930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=51 name=(null) inode=11935 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=52 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=53 name=(null) inode=11936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=54 name=(null) inode=11936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=55 name=(null) inode=11937 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=56 name=(null) inode=11936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=57 name=(null) inode=11938 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=58 name=(null) inode=11936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=59 name=(null) inode=11939 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=60 name=(null) inode=11939 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=61 name=(null) inode=11940 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=62 name=(null) inode=11939 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=63 name=(null) inode=11941 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=64 name=(null) inode=11939 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=65 name=(null) inode=11942 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=66 name=(null) inode=11939 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=67 name=(null) inode=11943 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=68 name=(null) inode=11939 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=69 name=(null) inode=11944 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=70 name=(null) inode=11936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=71 name=(null) inode=11945 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=72 name=(null) inode=11945 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=73 name=(null) inode=11946 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=74 name=(null) inode=11945 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=75 name=(null) inode=11947 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=76 name=(null) inode=11945 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=77 name=(null) inode=11948 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=78 name=(null) inode=11945 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=79 name=(null) inode=11949 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=80 name=(null) inode=11945 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=81 name=(null) inode=11950 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=82 name=(null) inode=11936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=83 name=(null) inode=11951 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=84 name=(null) inode=11951 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=85 name=(null) inode=11952 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=86 name=(null) inode=11951 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=87 name=(null) inode=11953 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=88 name=(null) inode=11951 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=89 name=(null) inode=11954 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=90 name=(null) inode=11951 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=91 name=(null) inode=11955 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=92 name=(null) inode=11951 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=93 name=(null) inode=11956 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=94 name=(null) inode=11936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=95 name=(null) inode=11957 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=96 name=(null) inode=11957 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=97 name=(null) inode=11958 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=98 name=(null) inode=11957 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=99 name=(null) inode=11959 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=100 name=(null) inode=11957 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=101 name=(null) inode=11960 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=102 name=(null) inode=11957 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=103 name=(null) inode=11961 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=104 name=(null) inode=11957 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PATH item=105 name=(null) inode=11962 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:06:03.197000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:06:03.238433 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:06:03.240339 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:06:03.263076 systemd-networkd[1019]: lo: Link UP Oct 2 19:06:03.263092 systemd-networkd[1019]: lo: Gained carrier Oct 2 19:06:03.264336 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:06:03.264583 systemd-networkd[1019]: Enumeration completed Oct 2 19:06:03.264725 systemd[1]: Started systemd-networkd.service. Oct 2 19:06:03.264882 systemd-networkd[1019]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:06:03.266395 systemd-networkd[1019]: eth0: Link UP Oct 2 19:06:03.266409 systemd-networkd[1019]: eth0: Gained carrier Oct 2 19:06:03.314552 systemd-networkd[1019]: eth0: DHCPv4 address 10.0.0.35/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:06:03.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:03.324454 kernel: kvm: Nested Virtualization enabled Oct 2 19:06:03.324687 kernel: SVM: kvm: Nested Paging enabled Oct 2 19:06:03.341376 kernel: EDAC MC: Ver: 3.0.0 Oct 2 19:06:03.360861 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:06:03.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:03.363339 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:06:03.380637 lvm[1047]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:06:03.408648 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:06:03.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:03.409573 systemd[1]: Reached target cryptsetup.target. Oct 2 19:06:03.411333 systemd[1]: Starting lvm2-activation.service... Oct 2 19:06:03.415459 lvm[1048]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:06:03.506857 systemd[1]: Finished lvm2-activation.service. Oct 2 19:06:03.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:03.507885 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:06:03.508691 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:06:03.508721 systemd[1]: Reached target local-fs.target. Oct 2 19:06:03.509442 systemd[1]: Reached target machines.target. Oct 2 19:06:03.512700 systemd[1]: Starting ldconfig.service... Oct 2 19:06:03.513854 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:06:03.513898 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:06:03.515162 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:06:03.517456 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:06:03.519550 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:06:03.521632 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:06:03.521708 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:06:03.523254 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:06:03.532610 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1050 (bootctl) Oct 2 19:06:03.534452 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:06:03.536348 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:06:03.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:03.546628 systemd-tmpfiles[1053]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:06:03.548252 systemd-tmpfiles[1053]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:06:03.550062 systemd-tmpfiles[1053]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:06:03.863845 systemd-fsck[1059]: fsck.fat 4.2 (2021-01-31) Oct 2 19:06:03.863845 systemd-fsck[1059]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:06:03.865707 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:06:03.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:03.868256 systemd[1]: Mounting boot.mount... Oct 2 19:06:03.883761 systemd[1]: Mounted boot.mount. Oct 2 19:06:03.895268 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:06:03.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.002024 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:06:04.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.003979 systemd[1]: Starting audit-rules.service... Oct 2 19:06:04.005572 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:06:04.007374 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:06:04.009000 audit: BPF prog-id=27 op=LOAD Oct 2 19:06:04.011436 systemd[1]: Starting systemd-resolved.service... Oct 2 19:06:04.017000 audit: BPF prog-id=28 op=LOAD Oct 2 19:06:04.019175 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:06:04.021108 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:06:04.022490 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:06:04.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.023926 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:06:04.025000 audit[1073]: SYSTEM_BOOT pid=1073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.028952 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:06:04.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.031324 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:06:04.032284 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:06:04.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.047256 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:06:04.061000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:06:04.061000 audit[1082]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe0861b210 a2=420 a3=0 items=0 ppid=1062 pid=1082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:04.061000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:06:04.062558 augenrules[1082]: No rules Oct 2 19:06:04.062975 systemd[1]: Finished audit-rules.service. Oct 2 19:06:04.087419 systemd-resolved[1066]: Positive Trust Anchors: Oct 2 19:06:04.087722 systemd-resolved[1066]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:06:04.087820 systemd-resolved[1066]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:06:04.088276 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:06:04.089506 systemd[1]: Reached target time-set.target. Oct 2 19:06:05.099592 systemd-timesyncd[1072]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:06:05.099666 systemd-timesyncd[1072]: Initial clock synchronization to Mon 2023-10-02 19:06:05.099524 UTC. Oct 2 19:06:05.116138 systemd-resolved[1066]: Defaulting to hostname 'linux'. Oct 2 19:06:05.117839 systemd[1]: Started systemd-resolved.service. Oct 2 19:06:05.118821 systemd[1]: Reached target network.target. Oct 2 19:06:05.119658 systemd[1]: Reached target nss-lookup.target. Oct 2 19:06:05.220718 ldconfig[1049]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:06:05.226620 systemd[1]: Finished ldconfig.service. Oct 2 19:06:05.228622 systemd[1]: Starting systemd-update-done.service... Oct 2 19:06:05.237177 systemd[1]: Finished systemd-update-done.service. Oct 2 19:06:05.237915 systemd[1]: Reached target sysinit.target. Oct 2 19:06:05.238563 systemd[1]: Started motdgen.path. Oct 2 19:06:05.239138 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:06:05.240010 systemd[1]: Started logrotate.timer. Oct 2 19:06:05.240606 systemd[1]: Started mdadm.timer. Oct 2 19:06:05.241147 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:06:05.241772 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:06:05.241797 systemd[1]: Reached target paths.target. Oct 2 19:06:05.242356 systemd[1]: Reached target timers.target. Oct 2 19:06:05.243148 systemd[1]: Listening on dbus.socket. Oct 2 19:06:05.244556 systemd[1]: Starting docker.socket... Oct 2 19:06:05.246895 systemd[1]: Listening on sshd.socket. Oct 2 19:06:05.247502 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:06:05.247805 systemd[1]: Listening on docker.socket. Oct 2 19:06:05.248498 systemd[1]: Reached target sockets.target. Oct 2 19:06:05.249078 systemd[1]: Reached target basic.target. Oct 2 19:06:05.249619 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:06:05.249639 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:06:05.250422 systemd[1]: Starting containerd.service... Oct 2 19:06:05.251917 systemd[1]: Starting dbus.service... Oct 2 19:06:05.253420 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:06:05.255657 systemd[1]: Starting extend-filesystems.service... Oct 2 19:06:05.256566 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:06:05.259307 systemd[1]: Starting motdgen.service... Oct 2 19:06:05.261690 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:06:05.263166 jq[1093]: false Oct 2 19:06:05.263919 systemd[1]: Starting prepare-critools.service... Oct 2 19:06:05.265550 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:06:05.271767 systemd[1]: Starting sshd-keygen.service... Oct 2 19:06:05.274601 systemd[1]: Starting systemd-logind.service... Oct 2 19:06:05.275325 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:06:05.275397 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:06:05.275894 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:06:05.276670 systemd[1]: Starting update-engine.service... Oct 2 19:06:05.279309 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:06:05.283784 extend-filesystems[1094]: Found sr0 Oct 2 19:06:05.283784 extend-filesystems[1094]: Found vda Oct 2 19:06:05.283784 extend-filesystems[1094]: Found vda1 Oct 2 19:06:05.283784 extend-filesystems[1094]: Found vda2 Oct 2 19:06:05.283784 extend-filesystems[1094]: Found vda3 Oct 2 19:06:05.283784 extend-filesystems[1094]: Found usr Oct 2 19:06:05.283784 extend-filesystems[1094]: Found vda4 Oct 2 19:06:05.283784 extend-filesystems[1094]: Found vda6 Oct 2 19:06:05.283784 extend-filesystems[1094]: Found vda7 Oct 2 19:06:05.283784 extend-filesystems[1094]: Found vda9 Oct 2 19:06:05.283784 extend-filesystems[1094]: Checking size of /dev/vda9 Oct 2 19:06:05.295130 jq[1112]: true Oct 2 19:06:05.283387 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:06:05.287471 dbus-daemon[1092]: [system] SELinux support is enabled Oct 2 19:06:05.283613 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:06:05.284669 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:06:05.284904 systemd[1]: Finished motdgen.service. Oct 2 19:06:05.287795 systemd[1]: Started dbus.service. Oct 2 19:06:05.299824 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:06:05.300258 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:06:05.307706 tar[1117]: ./ Oct 2 19:06:05.307706 tar[1117]: ./loopback Oct 2 19:06:05.307046 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:06:05.307065 systemd[1]: Reached target system-config.target. Oct 2 19:06:05.308079 tar[1119]: crictl Oct 2 19:06:05.308293 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:06:05.308309 systemd[1]: Reached target user-config.target. Oct 2 19:06:05.323065 jq[1121]: true Oct 2 19:06:05.341435 extend-filesystems[1094]: Old size kept for /dev/vda9 Oct 2 19:06:05.342427 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:06:05.342429 systemd-logind[1110]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:06:05.342456 systemd-logind[1110]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:06:05.342602 systemd[1]: Finished extend-filesystems.service. Oct 2 19:06:05.343151 systemd-logind[1110]: New seat seat0. Oct 2 19:06:05.345295 systemd[1]: Started systemd-logind.service. Oct 2 19:06:05.399592 update_engine[1111]: I1002 19:06:05.399169 1111 main.cc:92] Flatcar Update Engine starting Oct 2 19:06:05.405339 systemd[1]: Started update-engine.service. Oct 2 19:06:05.405605 update_engine[1111]: I1002 19:06:05.405421 1111 update_check_scheduler.cc:74] Next update check in 7m48s Oct 2 19:06:05.408819 systemd[1]: Started locksmithd.service. Oct 2 19:06:05.436442 bash[1145]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:06:05.436680 tar[1117]: ./bandwidth Oct 2 19:06:05.418807 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:06:05.498444 tar[1117]: ./ptp Oct 2 19:06:05.515793 env[1122]: time="2023-10-02T19:06:05.515688555Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:06:05.534469 tar[1117]: ./vlan Oct 2 19:06:05.541089 env[1122]: time="2023-10-02T19:06:05.541047402Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:06:05.544473 env[1122]: time="2023-10-02T19:06:05.541510881Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:06:05.552347 env[1122]: time="2023-10-02T19:06:05.552311265Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:06:05.552347 env[1122]: time="2023-10-02T19:06:05.552344808Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:06:05.552633 env[1122]: time="2023-10-02T19:06:05.552593154Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:06:05.552687 env[1122]: time="2023-10-02T19:06:05.552633520Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:06:05.552687 env[1122]: time="2023-10-02T19:06:05.552649410Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:06:05.552687 env[1122]: time="2023-10-02T19:06:05.552658897Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:06:05.552760 env[1122]: time="2023-10-02T19:06:05.552737865Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:06:05.553036 env[1122]: time="2023-10-02T19:06:05.553013202Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:06:05.553195 env[1122]: time="2023-10-02T19:06:05.553167982Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:06:05.553246 env[1122]: time="2023-10-02T19:06:05.553195043Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:06:05.553274 env[1122]: time="2023-10-02T19:06:05.553253563Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:06:05.553274 env[1122]: time="2023-10-02T19:06:05.553266988Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:06:05.563771 env[1122]: time="2023-10-02T19:06:05.563721844Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:06:05.563771 env[1122]: time="2023-10-02T19:06:05.563772409Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:06:05.563982 env[1122]: time="2023-10-02T19:06:05.563796234Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:06:05.563982 env[1122]: time="2023-10-02T19:06:05.563832051Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:06:05.563982 env[1122]: time="2023-10-02T19:06:05.563848291Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:06:05.563982 env[1122]: time="2023-10-02T19:06:05.563909606Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:06:05.563982 env[1122]: time="2023-10-02T19:06:05.563925496Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:06:05.563982 env[1122]: time="2023-10-02T19:06:05.563938060Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:06:05.563982 env[1122]: time="2023-10-02T19:06:05.563950213Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:06:05.563982 env[1122]: time="2023-10-02T19:06:05.563963357Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:06:05.563982 env[1122]: time="2023-10-02T19:06:05.563982824Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:06:05.564149 env[1122]: time="2023-10-02T19:06:05.563994395Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:06:05.564149 env[1122]: time="2023-10-02T19:06:05.564121344Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:06:05.564219 env[1122]: time="2023-10-02T19:06:05.564199290Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:06:05.564431 env[1122]: time="2023-10-02T19:06:05.564412700Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:06:05.564472 env[1122]: time="2023-10-02T19:06:05.564437506Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564472 env[1122]: time="2023-10-02T19:06:05.564449379Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:06:05.564510 env[1122]: time="2023-10-02T19:06:05.564486709Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564510 env[1122]: time="2023-10-02T19:06:05.564497880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564546 env[1122]: time="2023-10-02T19:06:05.564508480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564546 env[1122]: time="2023-10-02T19:06:05.564518027Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564546 env[1122]: time="2023-10-02T19:06:05.564528647Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564546 env[1122]: time="2023-10-02T19:06:05.564539087Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564624 env[1122]: time="2023-10-02T19:06:05.564548945Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564624 env[1122]: time="2023-10-02T19:06:05.564558483Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564624 env[1122]: time="2023-10-02T19:06:05.564569624Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:06:05.564721 env[1122]: time="2023-10-02T19:06:05.564697634Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564767 env[1122]: time="2023-10-02T19:06:05.564732079Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564767 env[1122]: time="2023-10-02T19:06:05.564747117Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.564767 env[1122]: time="2023-10-02T19:06:05.564760452Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:06:05.564824 env[1122]: time="2023-10-02T19:06:05.564779127Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:06:05.564824 env[1122]: time="2023-10-02T19:06:05.564789967Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:06:05.564824 env[1122]: time="2023-10-02T19:06:05.564807891Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:06:05.564899 env[1122]: time="2023-10-02T19:06:05.564839370Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:06:05.565076 env[1122]: time="2023-10-02T19:06:05.565027894Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:06:05.574699 env[1122]: time="2023-10-02T19:06:05.565079210Z" level=info msg="Connect containerd service" Oct 2 19:06:05.574699 env[1122]: time="2023-10-02T19:06:05.565110078Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:06:05.574699 env[1122]: time="2023-10-02T19:06:05.565941497Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:06:05.578245 env[1122]: time="2023-10-02T19:06:05.575763847Z" level=info msg="Start subscribing containerd event" Oct 2 19:06:05.578245 env[1122]: time="2023-10-02T19:06:05.575894743Z" level=info msg="Start recovering state" Oct 2 19:06:05.578245 env[1122]: time="2023-10-02T19:06:05.576014007Z" level=info msg="Start event monitor" Oct 2 19:06:05.578245 env[1122]: time="2023-10-02T19:06:05.576045646Z" level=info msg="Start snapshots syncer" Oct 2 19:06:05.578245 env[1122]: time="2023-10-02T19:06:05.576064942Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:06:05.578245 env[1122]: time="2023-10-02T19:06:05.576074139Z" level=info msg="Start streaming server" Oct 2 19:06:05.578245 env[1122]: time="2023-10-02T19:06:05.576535575Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:06:05.578245 env[1122]: time="2023-10-02T19:06:05.576576301Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:06:05.578245 env[1122]: time="2023-10-02T19:06:05.576628309Z" level=info msg="containerd successfully booted in 0.120521s" Oct 2 19:06:05.576750 systemd[1]: Started containerd.service. Oct 2 19:06:05.603515 tar[1117]: ./host-device Oct 2 19:06:05.667078 locksmithd[1146]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:06:05.670724 tar[1117]: ./tuning Oct 2 19:06:05.700246 tar[1117]: ./vrf Oct 2 19:06:05.742506 tar[1117]: ./sbr Oct 2 19:06:05.785874 tar[1117]: ./tap Oct 2 19:06:05.821837 tar[1117]: ./dhcp Oct 2 19:06:05.945412 tar[1117]: ./static Oct 2 19:06:05.970816 tar[1117]: ./firewall Oct 2 19:06:06.010881 tar[1117]: ./macvlan Oct 2 19:06:06.053677 tar[1117]: ./dummy Oct 2 19:06:06.090086 systemd[1]: Finished prepare-critools.service. Oct 2 19:06:06.095172 tar[1117]: ./bridge Oct 2 19:06:06.130489 tar[1117]: ./ipvlan Oct 2 19:06:06.146077 systemd-networkd[1019]: eth0: Gained IPv6LL Oct 2 19:06:06.162185 tar[1117]: ./portmap Oct 2 19:06:06.194033 tar[1117]: ./host-local Oct 2 19:06:06.231315 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:06:07.989742 sshd_keygen[1113]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:06:08.013249 systemd[1]: Finished sshd-keygen.service. Oct 2 19:06:08.016198 systemd[1]: Starting issuegen.service... Oct 2 19:06:08.021259 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:06:08.021454 systemd[1]: Finished issuegen.service. Oct 2 19:06:08.023795 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:06:08.029242 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:06:08.031915 systemd[1]: Started getty@tty1.service. Oct 2 19:06:08.034330 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:06:08.035514 systemd[1]: Reached target getty.target. Oct 2 19:06:08.036354 systemd[1]: Reached target multi-user.target. Oct 2 19:06:08.038667 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:06:08.045286 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:06:08.045449 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:06:08.046435 systemd[1]: Startup finished in 1.631s (kernel) + 10.790s (initrd) + 8.500s (userspace) = 20.922s. Oct 2 19:06:14.836171 systemd[1]: Created slice system-sshd.slice. Oct 2 19:06:14.842398 systemd[1]: Started sshd@0-10.0.0.35:22-10.0.0.1:57928.service. Oct 2 19:06:14.913116 sshd[1173]: Accepted publickey for core from 10.0.0.1 port 57928 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:06:14.915142 sshd[1173]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:14.929073 systemd[1]: Created slice user-500.slice. Oct 2 19:06:14.930727 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:06:14.933284 systemd-logind[1110]: New session 1 of user core. Oct 2 19:06:14.943701 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:06:14.945794 systemd[1]: Starting user@500.service... Oct 2 19:06:14.949638 (systemd)[1176]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:15.071007 systemd[1176]: Queued start job for default target default.target. Oct 2 19:06:15.071832 systemd[1176]: Reached target paths.target. Oct 2 19:06:15.071872 systemd[1176]: Reached target sockets.target. Oct 2 19:06:15.071891 systemd[1176]: Reached target timers.target. Oct 2 19:06:15.071906 systemd[1176]: Reached target basic.target. Oct 2 19:06:15.074857 systemd[1176]: Reached target default.target. Oct 2 19:06:15.074920 systemd[1176]: Startup finished in 118ms. Oct 2 19:06:15.074932 systemd[1]: Started user@500.service. Oct 2 19:06:15.076375 systemd[1]: Started session-1.scope. Oct 2 19:06:15.150491 systemd[1]: Started sshd@1-10.0.0.35:22-10.0.0.1:57936.service. Oct 2 19:06:15.195739 sshd[1185]: Accepted publickey for core from 10.0.0.1 port 57936 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:06:15.197392 sshd[1185]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:15.206382 systemd-logind[1110]: New session 2 of user core. Oct 2 19:06:15.207021 systemd[1]: Started session-2.scope. Oct 2 19:06:15.294110 sshd[1185]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:15.299669 systemd[1]: Started sshd@2-10.0.0.35:22-10.0.0.1:57948.service. Oct 2 19:06:15.301632 systemd[1]: sshd@1-10.0.0.35:22-10.0.0.1:57936.service: Deactivated successfully. Oct 2 19:06:15.302469 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:06:15.310908 systemd-logind[1110]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:06:15.314764 systemd-logind[1110]: Removed session 2. Oct 2 19:06:15.355834 sshd[1190]: Accepted publickey for core from 10.0.0.1 port 57948 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:06:15.360223 sshd[1190]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:15.378800 systemd-logind[1110]: New session 3 of user core. Oct 2 19:06:15.379680 systemd[1]: Started session-3.scope. Oct 2 19:06:15.439344 sshd[1190]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:15.443260 systemd[1]: Started sshd@3-10.0.0.35:22-10.0.0.1:57950.service. Oct 2 19:06:15.443916 systemd[1]: sshd@2-10.0.0.35:22-10.0.0.1:57948.service: Deactivated successfully. Oct 2 19:06:15.444574 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:06:15.445190 systemd-logind[1110]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:06:15.445978 systemd-logind[1110]: Removed session 3. Oct 2 19:06:15.487299 sshd[1196]: Accepted publickey for core from 10.0.0.1 port 57950 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:06:15.490083 sshd[1196]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:15.497451 systemd-logind[1110]: New session 4 of user core. Oct 2 19:06:15.498711 systemd[1]: Started session-4.scope. Oct 2 19:06:15.561380 sshd[1196]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:15.565235 systemd[1]: Started sshd@4-10.0.0.35:22-10.0.0.1:57966.service. Oct 2 19:06:15.565887 systemd[1]: sshd@3-10.0.0.35:22-10.0.0.1:57950.service: Deactivated successfully. Oct 2 19:06:15.566711 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:06:15.568110 systemd-logind[1110]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:06:15.569353 systemd-logind[1110]: Removed session 4. Oct 2 19:06:15.617278 sshd[1202]: Accepted publickey for core from 10.0.0.1 port 57966 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:06:15.620173 sshd[1202]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:15.633678 systemd-logind[1110]: New session 5 of user core. Oct 2 19:06:15.634235 systemd[1]: Started session-5.scope. Oct 2 19:06:15.712482 sudo[1206]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:06:15.712656 sudo[1206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:06:15.724244 dbus-daemon[1092]: Н\u001b\xfc\xf1U: received setenforce notice (enforcing=-1370118576) Oct 2 19:06:15.727489 sudo[1206]: pam_unix(sudo:session): session closed for user root Oct 2 19:06:15.730791 sshd[1202]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:15.735264 systemd[1]: Started sshd@5-10.0.0.35:22-10.0.0.1:57972.service. Oct 2 19:06:15.735810 systemd[1]: sshd@4-10.0.0.35:22-10.0.0.1:57966.service: Deactivated successfully. Oct 2 19:06:15.736573 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:06:15.737674 systemd-logind[1110]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:06:15.739223 systemd-logind[1110]: Removed session 5. Oct 2 19:06:15.782807 sshd[1209]: Accepted publickey for core from 10.0.0.1 port 57972 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:06:15.784447 sshd[1209]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:15.788956 systemd-logind[1110]: New session 6 of user core. Oct 2 19:06:15.790062 systemd[1]: Started session-6.scope. Oct 2 19:06:15.847918 sudo[1214]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:06:15.848178 sudo[1214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:06:15.852365 sudo[1214]: pam_unix(sudo:session): session closed for user root Oct 2 19:06:15.858376 sudo[1213]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:06:15.858605 sudo[1213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:06:15.870363 systemd[1]: Stopping audit-rules.service... Oct 2 19:06:15.870000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:06:15.871910 auditctl[1217]: No rules Oct 2 19:06:15.872456 kernel: kauditd_printk_skb: 122 callbacks suppressed Oct 2 19:06:15.872514 kernel: audit: type=1305 audit(1696273575.870:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:06:15.872447 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:06:15.872722 systemd[1]: Stopped audit-rules.service. Oct 2 19:06:15.870000 audit[1217]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd7bff3270 a2=420 a3=0 items=0 ppid=1 pid=1217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:15.875061 systemd[1]: Starting audit-rules.service... Oct 2 19:06:15.877711 kernel: audit: type=1300 audit(1696273575.870:163): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd7bff3270 a2=420 a3=0 items=0 ppid=1 pid=1217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:15.877784 kernel: audit: type=1327 audit(1696273575.870:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:06:15.870000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:06:15.878799 kernel: audit: type=1131 audit(1696273575.871:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.894649 augenrules[1234]: No rules Oct 2 19:06:15.895612 systemd[1]: Finished audit-rules.service. Oct 2 19:06:15.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.896584 sudo[1213]: pam_unix(sudo:session): session closed for user root Oct 2 19:06:15.895000 audit[1213]: USER_END pid=1213 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.898629 sshd[1209]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:15.901906 kernel: audit: type=1130 audit(1696273575.895:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.901961 kernel: audit: type=1106 audit(1696273575.895:166): pid=1213 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.902012 kernel: audit: type=1104 audit(1696273575.895:167): pid=1213 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.895000 audit[1213]: CRED_DISP pid=1213 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.902326 systemd[1]: sshd@5-10.0.0.35:22-10.0.0.1:57972.service: Deactivated successfully. Oct 2 19:06:15.903030 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:06:15.903772 systemd-logind[1110]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:06:15.898000 audit[1209]: USER_END pid=1209 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:15.904759 systemd[1]: Started sshd@6-10.0.0.35:22-10.0.0.1:57988.service. Oct 2 19:06:15.905975 systemd-logind[1110]: Removed session 6. Oct 2 19:06:15.907402 kernel: audit: type=1106 audit(1696273575.898:168): pid=1209 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:15.907459 kernel: audit: type=1104 audit(1696273575.899:169): pid=1209 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:15.899000 audit[1209]: CRED_DISP pid=1209 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:15.909542 kernel: audit: type=1131 audit(1696273575.901:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.35:22-10.0.0.1:57972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.35:22-10.0.0.1:57972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.35:22-10.0.0.1:57988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.945000 audit[1240]: USER_ACCT pid=1240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:15.947053 sshd[1240]: Accepted publickey for core from 10.0.0.1 port 57988 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:06:15.947000 audit[1240]: CRED_ACQ pid=1240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:15.947000 audit[1240]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebb45e6e0 a2=3 a3=0 items=0 ppid=1 pid=1240 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:15.947000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:15.948463 sshd[1240]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:15.952015 systemd-logind[1110]: New session 7 of user core. Oct 2 19:06:15.952944 systemd[1]: Started session-7.scope. Oct 2 19:06:15.955000 audit[1240]: USER_START pid=1240 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:15.957000 audit[1242]: CRED_ACQ pid=1242 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:16.005000 audit[1243]: USER_ACCT pid=1243 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:06:16.005000 audit[1243]: CRED_REFR pid=1243 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:06:16.006223 sudo[1243]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:06:16.006391 sudo[1243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:06:16.007000 audit[1243]: USER_START pid=1243 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:06:16.551298 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:06:16.557076 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:06:16.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:16.557435 systemd[1]: Reached target network-online.target. Oct 2 19:06:16.558899 systemd[1]: Starting docker.service... Oct 2 19:06:16.596897 env[1261]: time="2023-10-02T19:06:16.596815553Z" level=info msg="Starting up" Oct 2 19:06:16.598376 env[1261]: time="2023-10-02T19:06:16.598332278Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:06:16.598376 env[1261]: time="2023-10-02T19:06:16.598361563Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:06:16.598447 env[1261]: time="2023-10-02T19:06:16.598383213Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:06:16.598447 env[1261]: time="2023-10-02T19:06:16.598393102Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:06:16.599954 env[1261]: time="2023-10-02T19:06:16.599907993Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:06:16.599954 env[1261]: time="2023-10-02T19:06:16.599928341Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:06:16.599954 env[1261]: time="2023-10-02T19:06:16.599951635Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:06:16.600067 env[1261]: time="2023-10-02T19:06:16.599965531Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:06:16.606842 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3896858347-merged.mount: Deactivated successfully. Oct 2 19:06:17.359916 env[1261]: time="2023-10-02T19:06:17.359837091Z" level=info msg="Loading containers: start." Oct 2 19:06:17.409000 audit[1296]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.409000 audit[1296]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff7d12daf0 a2=0 a3=7fff7d12dadc items=0 ppid=1261 pid=1296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.409000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:06:17.411000 audit[1298]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.411000 audit[1298]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff946b7c50 a2=0 a3=7fff946b7c3c items=0 ppid=1261 pid=1298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.411000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:06:17.413000 audit[1300]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.413000 audit[1300]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffca530afa0 a2=0 a3=7ffca530af8c items=0 ppid=1261 pid=1300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.413000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:06:17.415000 audit[1302]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.415000 audit[1302]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffec4ebefb0 a2=0 a3=7ffec4ebef9c items=0 ppid=1261 pid=1302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.415000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:06:17.417000 audit[1304]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.417000 audit[1304]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd6d08dea0 a2=0 a3=7ffd6d08de8c items=0 ppid=1261 pid=1304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.417000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:06:17.436000 audit[1309]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.436000 audit[1309]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe37bbb880 a2=0 a3=7ffe37bbb86c items=0 ppid=1261 pid=1309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.436000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:06:17.446000 audit[1311]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.446000 audit[1311]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe81d946c0 a2=0 a3=7ffe81d946ac items=0 ppid=1261 pid=1311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.446000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:06:17.448000 audit[1313]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.448000 audit[1313]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc6df84aa0 a2=0 a3=7ffc6df84a8c items=0 ppid=1261 pid=1313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.448000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:06:17.450000 audit[1315]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.450000 audit[1315]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffc67d11b50 a2=0 a3=7ffc67d11b3c items=0 ppid=1261 pid=1315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.450000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:06:17.460000 audit[1319]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.460000 audit[1319]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdb43de180 a2=0 a3=7ffdb43de16c items=0 ppid=1261 pid=1319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.460000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:06:17.461000 audit[1320]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.461000 audit[1320]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd16c260c0 a2=0 a3=7ffd16c260ac items=0 ppid=1261 pid=1320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.461000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:06:17.469892 kernel: Initializing XFRM netlink socket Oct 2 19:06:17.514329 env[1261]: time="2023-10-02T19:06:17.514276350Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:06:17.542000 audit[1328]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.542000 audit[1328]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffcf3bf78b0 a2=0 a3=7ffcf3bf789c items=0 ppid=1261 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.542000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:06:17.556000 audit[1331]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.556000 audit[1331]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffcd0935590 a2=0 a3=7ffcd093557c items=0 ppid=1261 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.556000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:06:17.560000 audit[1334]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.560000 audit[1334]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe042e1ce0 a2=0 a3=7ffe042e1ccc items=0 ppid=1261 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.560000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:06:17.562000 audit[1336]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.562000 audit[1336]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd50f544c0 a2=0 a3=7ffd50f544ac items=0 ppid=1261 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.562000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:06:17.565000 audit[1338]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.565000 audit[1338]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff33166490 a2=0 a3=7fff3316647c items=0 ppid=1261 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.565000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:06:17.568000 audit[1340]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.568000 audit[1340]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe8465a8c0 a2=0 a3=7ffe8465a8ac items=0 ppid=1261 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.568000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:06:17.570000 audit[1342]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.570000 audit[1342]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd192bbf50 a2=0 a3=7ffd192bbf3c items=0 ppid=1261 pid=1342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.570000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:06:17.581000 audit[1345]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.581000 audit[1345]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc23975770 a2=0 a3=7ffc2397575c items=0 ppid=1261 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.581000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:06:17.583000 audit[1347]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.583000 audit[1347]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd59ec8ba0 a2=0 a3=7ffd59ec8b8c items=0 ppid=1261 pid=1347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.583000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:06:17.586000 audit[1349]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.586000 audit[1349]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdd65490b0 a2=0 a3=7ffdd654909c items=0 ppid=1261 pid=1349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.586000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:06:17.588000 audit[1351]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.588000 audit[1351]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe7420f260 a2=0 a3=7ffe7420f24c items=0 ppid=1261 pid=1351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.588000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:06:17.589676 systemd-networkd[1019]: docker0: Link UP Oct 2 19:06:17.602000 audit[1355]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.602000 audit[1355]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc8f71f9c0 a2=0 a3=7ffc8f71f9ac items=0 ppid=1261 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.602000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:06:17.603000 audit[1356]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:06:17.603000 audit[1356]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe62b8a3f0 a2=0 a3=7ffe62b8a3dc items=0 ppid=1261 pid=1356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:17.603000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:06:17.605071 env[1261]: time="2023-10-02T19:06:17.605030697Z" level=info msg="Loading containers: done." Oct 2 19:06:17.619536 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2825429361-merged.mount: Deactivated successfully. Oct 2 19:06:17.631607 env[1261]: time="2023-10-02T19:06:17.631534200Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:06:17.631951 env[1261]: time="2023-10-02T19:06:17.631926846Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:06:17.632085 env[1261]: time="2023-10-02T19:06:17.632064675Z" level=info msg="Daemon has completed initialization" Oct 2 19:06:17.658764 systemd[1]: Started docker.service. Oct 2 19:06:17.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:17.668732 env[1261]: time="2023-10-02T19:06:17.668615040Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:06:17.691699 systemd[1]: Reloading. Oct 2 19:06:17.760536 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T19:06:17Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:06:17.760559 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T19:06:17Z" level=info msg="torcx already run" Oct 2 19:06:17.845862 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:06:17.845890 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:06:17.875494 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:06:17.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit: BPF prog-id=34 op=LOAD Oct 2 19:06:17.956000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit: BPF prog-id=35 op=LOAD Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.956000 audit: BPF prog-id=36 op=LOAD Oct 2 19:06:17.956000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:06:17.956000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:06:17.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit: BPF prog-id=37 op=LOAD Oct 2 19:06:17.958000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit: BPF prog-id=38 op=LOAD Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.958000 audit: BPF prog-id=39 op=LOAD Oct 2 19:06:17.958000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:06:17.958000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:06:17.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.960000 audit: BPF prog-id=40 op=LOAD Oct 2 19:06:17.960000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:06:17.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit: BPF prog-id=41 op=LOAD Oct 2 19:06:17.965000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit: BPF prog-id=42 op=LOAD Oct 2 19:06:17.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.966000 audit: BPF prog-id=43 op=LOAD Oct 2 19:06:17.966000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:06:17.966000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:06:17.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.968000 audit: BPF prog-id=44 op=LOAD Oct 2 19:06:17.968000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.970000 audit: BPF prog-id=45 op=LOAD Oct 2 19:06:17.970000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:06:17.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.972000 audit: BPF prog-id=46 op=LOAD Oct 2 19:06:17.972000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit: BPF prog-id=47 op=LOAD Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:17.973000 audit: BPF prog-id=48 op=LOAD Oct 2 19:06:17.973000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:06:17.973000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:06:17.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:17.984034 systemd[1]: Started kubelet.service. Oct 2 19:06:18.050648 kubelet[1445]: E1002 19:06:18.050527 1445 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:06:18.053673 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:06:18.053903 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:06:18.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:06:18.300403 env[1122]: time="2023-10-02T19:06:18.300336473Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 19:06:18.900841 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount376716876.mount: Deactivated successfully. Oct 2 19:06:21.527595 env[1122]: time="2023-10-02T19:06:21.526838496Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:21.546523 env[1122]: time="2023-10-02T19:06:21.545665163Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:21.557010 env[1122]: time="2023-10-02T19:06:21.556918447Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:21.561593 env[1122]: time="2023-10-02T19:06:21.561445627Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce\"" Oct 2 19:06:21.561813 env[1122]: time="2023-10-02T19:06:21.560612064Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:21.579484 env[1122]: time="2023-10-02T19:06:21.579431637Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 19:06:26.275597 env[1122]: time="2023-10-02T19:06:26.274302556Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:26.305784 env[1122]: time="2023-10-02T19:06:26.304380623Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:26.314895 env[1122]: time="2023-10-02T19:06:26.314763775Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:26.331060 env[1122]: time="2023-10-02T19:06:26.329762964Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:26.351451 env[1122]: time="2023-10-02T19:06:26.333481978Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57\"" Oct 2 19:06:26.388331 env[1122]: time="2023-10-02T19:06:26.381411363Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 19:06:28.193549 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:06:28.193732 kernel: audit: type=1130 audit(1696273588.181:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:28.193788 kernel: audit: type=1131 audit(1696273588.181:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:28.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:28.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:28.183137 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:06:28.183376 systemd[1]: Stopped kubelet.service. Oct 2 19:06:28.192886 systemd[1]: Started kubelet.service. Oct 2 19:06:28.197888 kernel: audit: type=1130 audit(1696273588.192:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:28.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:28.443293 kubelet[1481]: E1002 19:06:28.442961 1481 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:06:28.454817 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:06:28.455017 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:06:28.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:06:28.461745 kernel: audit: type=1131 audit(1696273588.449:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:06:31.279618 env[1122]: time="2023-10-02T19:06:31.278356223Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:31.296811 env[1122]: time="2023-10-02T19:06:31.293002440Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:31.470893 env[1122]: time="2023-10-02T19:06:31.469581889Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:31.479890 env[1122]: time="2023-10-02T19:06:31.479781297Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:31.480382 env[1122]: time="2023-10-02T19:06:31.480317131Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8\"" Oct 2 19:06:31.532576 env[1122]: time="2023-10-02T19:06:31.531818635Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 19:06:34.154734 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3879092447.mount: Deactivated successfully. Oct 2 19:06:36.302420 env[1122]: time="2023-10-02T19:06:36.287939089Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:36.353910 env[1122]: time="2023-10-02T19:06:36.353103676Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:36.360662 env[1122]: time="2023-10-02T19:06:36.358811800Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:36.378996 env[1122]: time="2023-10-02T19:06:36.377428874Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:36.378996 env[1122]: time="2023-10-02T19:06:36.377739376Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0\"" Oct 2 19:06:36.476475 env[1122]: time="2023-10-02T19:06:36.476404098Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:06:37.961676 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount98197527.mount: Deactivated successfully. Oct 2 19:06:38.020465 env[1122]: time="2023-10-02T19:06:38.019490374Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:38.031467 env[1122]: time="2023-10-02T19:06:38.030084335Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:38.031467 env[1122]: time="2023-10-02T19:06:38.030759887Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:38.043316 env[1122]: time="2023-10-02T19:06:38.043187676Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:38.044296 env[1122]: time="2023-10-02T19:06:38.043580053Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:06:38.071585 env[1122]: time="2023-10-02T19:06:38.070912572Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 19:06:38.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:38.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:38.662614 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:06:38.662909 systemd[1]: Stopped kubelet.service. Oct 2 19:06:38.664898 systemd[1]: Started kubelet.service. Oct 2 19:06:38.671902 kernel: audit: type=1130 audit(1696273598.661:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:38.672053 kernel: audit: type=1131 audit(1696273598.661:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:38.672086 kernel: audit: type=1130 audit(1696273598.661:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:38.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:38.890988 kubelet[1507]: E1002 19:06:38.890589 1507 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:06:38.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:06:38.902516 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:06:38.902710 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:06:38.913131 kernel: audit: type=1131 audit(1696273598.902:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:06:48.911074 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Oct 2 19:06:48.924320 systemd[1]: Stopped kubelet.service. Oct 2 19:06:48.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:48.966309 kernel: audit: type=1130 audit(1696273608.934:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:48.966455 kernel: audit: type=1131 audit(1696273608.934:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:48.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:48.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:48.965306 systemd[1]: Started kubelet.service. Oct 2 19:06:48.978906 kernel: audit: type=1130 audit(1696273608.973:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:49.135954 kubelet[1514]: E1002 19:06:49.135885 1514 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:06:49.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:06:49.161934 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:06:49.162095 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:06:49.170637 kernel: audit: type=1131 audit(1696273609.161:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:06:51.159881 update_engine[1111]: I1002 19:06:51.158751 1111 update_attempter.cc:505] Updating boot flags... Oct 2 19:06:51.830758 env[1122]: time="2023-10-02T19:06:51.829386653Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:51.839208 env[1122]: time="2023-10-02T19:06:51.837430830Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:51.859343 env[1122]: time="2023-10-02T19:06:51.858671580Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:51.879541 env[1122]: time="2023-10-02T19:06:51.875828359Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:51.879541 env[1122]: time="2023-10-02T19:06:51.876343651Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Oct 2 19:06:51.916890 env[1122]: time="2023-10-02T19:06:51.916457281Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:06:54.922582 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2982610495.mount: Deactivated successfully. Oct 2 19:06:56.709310 env[1122]: time="2023-10-02T19:06:56.704272294Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:56.782693 env[1122]: time="2023-10-02T19:06:56.782427387Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:56.872104 env[1122]: time="2023-10-02T19:06:56.872044965Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:56.917519 env[1122]: time="2023-10-02T19:06:56.917455741Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:56.918134 env[1122]: time="2023-10-02T19:06:56.918097400Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:06:59.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:59.412581 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Oct 2 19:06:59.412876 systemd[1]: Stopped kubelet.service. Oct 2 19:06:59.414662 systemd[1]: Started kubelet.service. Oct 2 19:06:59.421789 kernel: audit: type=1130 audit(1696273619.411:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:59.421950 kernel: audit: type=1131 audit(1696273619.411:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:59.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:59.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:59.428445 kernel: audit: type=1130 audit(1696273619.413:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:59.663991 kubelet[1615]: E1002 19:06:59.663901 1615 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:06:59.675962 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:06:59.676122 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:06:59.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:06:59.680925 kernel: audit: type=1131 audit(1696273619.674:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:07:01.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:01.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:01.295236 systemd[1]: Stopped kubelet.service. Oct 2 19:07:01.302790 kernel: audit: type=1130 audit(1696273621.294:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:01.302992 kernel: audit: type=1131 audit(1696273621.294:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:01.334120 systemd[1]: Reloading. Oct 2 19:07:01.472289 /usr/lib/systemd/system-generators/torcx-generator[1647]: time="2023-10-02T19:07:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:07:01.472331 /usr/lib/systemd/system-generators/torcx-generator[1647]: time="2023-10-02T19:07:01Z" level=info msg="torcx already run" Oct 2 19:07:01.656616 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:07:01.665030 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:07:01.697055 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:07:01.805824 kernel: audit: type=1400 audit(1696273621.784:398): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806019 kernel: audit: type=1400 audit(1696273621.784:399): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806063 kernel: audit: type=1400 audit(1696273621.784:400): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806096 kernel: audit: type=1400 audit(1696273621.784:401): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.796000 audit: BPF prog-id=49 op=LOAD Oct 2 19:07:01.796000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:07:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.802000 audit: BPF prog-id=50 op=LOAD Oct 2 19:07:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.804000 audit: BPF prog-id=51 op=LOAD Oct 2 19:07:01.805000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:07:01.805000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:07:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.812000 audit: BPF prog-id=52 op=LOAD Oct 2 19:07:01.813000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:07:01.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.814000 audit: BPF prog-id=53 op=LOAD Oct 2 19:07:01.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.815000 audit: BPF prog-id=54 op=LOAD Oct 2 19:07:01.815000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:07:01.815000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:07:01.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.820000 audit: BPF prog-id=55 op=LOAD Oct 2 19:07:01.820000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:07:01.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.826000 audit: BPF prog-id=56 op=LOAD Oct 2 19:07:01.826000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:07:01.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.827000 audit: BPF prog-id=57 op=LOAD Oct 2 19:07:01.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.828000 audit: BPF prog-id=58 op=LOAD Oct 2 19:07:01.828000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:07:01.828000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:07:01.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.831000 audit: BPF prog-id=59 op=LOAD Oct 2 19:07:01.831000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:07:01.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.833000 audit: BPF prog-id=60 op=LOAD Oct 2 19:07:01.833000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit: BPF prog-id=61 op=LOAD Oct 2 19:07:01.834000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit: BPF prog-id=62 op=LOAD Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:01.835000 audit: BPF prog-id=63 op=LOAD Oct 2 19:07:01.835000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:07:01.835000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:07:01.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:01.884420 systemd[1]: Started kubelet.service. Oct 2 19:07:02.111371 kubelet[1690]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:07:02.111371 kubelet[1690]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:07:02.111371 kubelet[1690]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:07:02.111371 kubelet[1690]: I1002 19:07:02.110200 1690 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:07:02.758711 kubelet[1690]: I1002 19:07:02.751931 1690 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:07:02.758711 kubelet[1690]: I1002 19:07:02.751978 1690 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:07:02.758711 kubelet[1690]: I1002 19:07:02.752270 1690 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:07:02.758711 kubelet[1690]: I1002 19:07:02.758178 1690 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:07:02.760241 kubelet[1690]: E1002 19:07:02.759624 1690 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.35:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:02.770173 kubelet[1690]: I1002 19:07:02.767728 1690 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:07:02.770173 kubelet[1690]: I1002 19:07:02.768000 1690 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:07:02.770173 kubelet[1690]: I1002 19:07:02.768212 1690 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:07:02.770173 kubelet[1690]: I1002 19:07:02.768240 1690 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:07:02.770173 kubelet[1690]: I1002 19:07:02.768251 1690 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:07:02.770173 kubelet[1690]: I1002 19:07:02.768399 1690 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:07:02.770613 kubelet[1690]: I1002 19:07:02.768514 1690 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:07:02.770613 kubelet[1690]: I1002 19:07:02.768534 1690 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:07:02.770613 kubelet[1690]: I1002 19:07:02.768562 1690 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:07:02.770613 kubelet[1690]: I1002 19:07:02.768581 1690 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:07:02.771671 kubelet[1690]: W1002 19:07:02.771517 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.35:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:02.771671 kubelet[1690]: W1002 19:07:02.771523 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:02.771671 kubelet[1690]: E1002 19:07:02.771597 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.35:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:02.771671 kubelet[1690]: E1002 19:07:02.771623 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:02.776170 kubelet[1690]: I1002 19:07:02.772495 1690 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:07:02.776170 kubelet[1690]: W1002 19:07:02.773022 1690 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:07:02.776170 kubelet[1690]: I1002 19:07:02.773882 1690 server.go:1232] "Started kubelet" Oct 2 19:07:02.776170 kubelet[1690]: I1002 19:07:02.774140 1690 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:07:02.776170 kubelet[1690]: I1002 19:07:02.774940 1690 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:07:02.777015 kubelet[1690]: I1002 19:07:02.776988 1690 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:07:02.777464 kubelet[1690]: I1002 19:07:02.777440 1690 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:07:02.777780 kubelet[1690]: I1002 19:07:02.777744 1690 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:07:02.777840 kubelet[1690]: I1002 19:07:02.777803 1690 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:07:02.777944 kubelet[1690]: I1002 19:07:02.777918 1690 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:07:02.778060 kubelet[1690]: E1002 19:07:02.777708 1690 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a5fdf674ccc11", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 7, 2, 773845009, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 7, 2, 773845009, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"localhost"}': 'Post "https://10.0.0.35:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.35:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:07:02.776000 audit[1690]: AVC avc: denied { mac_admin } for pid=1690 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:02.776000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:07:02.776000 audit[1690]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000dac600 a1=c000d64750 a2=c000dac5d0 a3=25 items=0 ppid=1 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.776000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:07:02.776000 audit[1690]: AVC avc: denied { mac_admin } for pid=1690 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:02.776000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:07:02.776000 audit[1690]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d52a80 a1=c000d64768 a2=c000dac690 a3=25 items=0 ppid=1 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.776000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:07:02.784895 kubelet[1690]: E1002 19:07:02.784815 1690 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:07:02.784895 kubelet[1690]: E1002 19:07:02.784882 1690 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:07:02.787359 kubelet[1690]: I1002 19:07:02.785990 1690 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:07:02.787359 kubelet[1690]: I1002 19:07:02.786113 1690 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:07:02.787359 kubelet[1690]: I1002 19:07:02.786193 1690 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:07:02.794539 kubelet[1690]: E1002 19:07:02.790901 1690 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.35:6443: connect: connection refused" interval="200ms" Oct 2 19:07:02.794539 kubelet[1690]: W1002 19:07:02.794269 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:02.798563 kubelet[1690]: E1002 19:07:02.797300 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:02.818000 audit[1702]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:02.818000 audit[1702]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd28bee660 a2=0 a3=7ffd28bee64c items=0 ppid=1690 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.818000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:07:02.819000 audit[1703]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:02.819000 audit[1703]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe63478ab0 a2=0 a3=7ffe63478a9c items=0 ppid=1690 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.819000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:07:02.824000 audit[1705]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:02.824000 audit[1705]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdfc8a19e0 a2=0 a3=7ffdfc8a19cc items=0 ppid=1690 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.824000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:07:02.826000 audit[1707]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:02.826000 audit[1707]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffe7408f70 a2=0 a3=7fffe7408f5c items=0 ppid=1690 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.826000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:07:02.872000 audit[1715]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:02.872000 audit[1715]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff322621f0 a2=0 a3=7fff322621dc items=0 ppid=1690 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.872000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:07:02.880418 kubelet[1690]: I1002 19:07:02.877428 1690 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:07:02.882000 audit[1717]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1717 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:02.882000 audit[1717]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd887a1450 a2=0 a3=7ffd887a143c items=0 ppid=1690 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.882000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:07:02.884770 kubelet[1690]: I1002 19:07:02.883705 1690 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:07:02.884770 kubelet[1690]: I1002 19:07:02.883761 1690 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:07:02.884770 kubelet[1690]: I1002 19:07:02.883806 1690 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:07:02.884770 kubelet[1690]: E1002 19:07:02.883963 1690 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:07:02.884770 kubelet[1690]: W1002 19:07:02.884670 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:02.884770 kubelet[1690]: E1002 19:07:02.884706 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:02.885000 audit[1718]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:02.885000 audit[1718]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd8265e7f0 a2=0 a3=7ffd8265e7dc items=0 ppid=1690 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.885000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:07:02.887000 audit[1719]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1719 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:02.887000 audit[1719]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffedaab75e0 a2=0 a3=7ffedaab75cc items=0 ppid=1690 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.887000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:07:02.894666 kubelet[1690]: I1002 19:07:02.892791 1690 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:07:02.894666 kubelet[1690]: E1002 19:07:02.893666 1690 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.35:6443/api/v1/nodes\": dial tcp 10.0.0.35:6443: connect: connection refused" node="localhost" Oct 2 19:07:02.894666 kubelet[1690]: I1002 19:07:02.893751 1690 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:07:02.894666 kubelet[1690]: I1002 19:07:02.893763 1690 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:07:02.894666 kubelet[1690]: I1002 19:07:02.893785 1690 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:07:02.893000 audit[1720]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1720 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:02.893000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff3d010d50 a2=0 a3=7fff3d010d3c items=0 ppid=1690 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.893000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:07:02.893000 audit[1721]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:02.893000 audit[1721]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa34e2830 a2=0 a3=7fffa34e281c items=0 ppid=1690 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.893000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:07:02.899000 audit[1722]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:02.899000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffda982c8a0 a2=0 a3=7ffda982c88c items=0 ppid=1690 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.899000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:07:02.904000 audit[1723]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1723 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:02.904000 audit[1723]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffece68db70 a2=0 a3=7ffece68db5c items=0 ppid=1690 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:02.904000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:07:02.984360 kubelet[1690]: E1002 19:07:02.984246 1690 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:07:03.000189 kubelet[1690]: E1002 19:07:02.996759 1690 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.35:6443: connect: connection refused" interval="400ms" Oct 2 19:07:03.099282 kubelet[1690]: I1002 19:07:03.098715 1690 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:07:03.099282 kubelet[1690]: E1002 19:07:03.099134 1690 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.35:6443/api/v1/nodes\": dial tcp 10.0.0.35:6443: connect: connection refused" node="localhost" Oct 2 19:07:03.185096 kubelet[1690]: E1002 19:07:03.184979 1690 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:07:03.245390 kubelet[1690]: I1002 19:07:03.227521 1690 policy_none.go:49] "None policy: Start" Oct 2 19:07:03.255431 kubelet[1690]: I1002 19:07:03.254540 1690 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:07:03.255431 kubelet[1690]: I1002 19:07:03.254606 1690 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:07:03.345836 systemd[1]: Created slice kubepods.slice. Oct 2 19:07:03.354875 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:07:03.361963 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:07:03.372569 kubelet[1690]: I1002 19:07:03.371038 1690 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:07:03.372569 kubelet[1690]: I1002 19:07:03.371153 1690 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:07:03.372569 kubelet[1690]: I1002 19:07:03.371709 1690 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:07:03.370000 audit[1690]: AVC avc: denied { mac_admin } for pid=1690 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:03.370000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:07:03.370000 audit[1690]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e2d4d0 a1=c000e515c0 a2=c000e2d4a0 a3=25 items=0 ppid=1 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:03.370000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:07:03.374478 kubelet[1690]: E1002 19:07:03.374046 1690 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:07:03.402283 kubelet[1690]: E1002 19:07:03.402220 1690 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.35:6443: connect: connection refused" interval="800ms" Oct 2 19:07:03.500730 kubelet[1690]: I1002 19:07:03.500681 1690 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:07:03.501627 kubelet[1690]: E1002 19:07:03.501581 1690 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.35:6443/api/v1/nodes\": dial tcp 10.0.0.35:6443: connect: connection refused" node="localhost" Oct 2 19:07:03.586044 kubelet[1690]: I1002 19:07:03.585932 1690 topology_manager.go:215] "Topology Admit Handler" podUID="162239232552f59e2bc457fd56064087" podNamespace="kube-system" podName="kube-apiserver-localhost" Oct 2 19:07:03.588109 kubelet[1690]: I1002 19:07:03.588061 1690 topology_manager.go:215] "Topology Admit Handler" podUID="6961ff1365464b1e2d286a48d6c5e40f" podNamespace="kube-system" podName="kube-controller-manager-localhost" Oct 2 19:07:03.589122 kubelet[1690]: I1002 19:07:03.589093 1690 topology_manager.go:215] "Topology Admit Handler" podUID="b619222ebfcfd1a0c9478200f0921497" podNamespace="kube-system" podName="kube-scheduler-localhost" Oct 2 19:07:03.594429 kubelet[1690]: I1002 19:07:03.594383 1690 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/162239232552f59e2bc457fd56064087-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"162239232552f59e2bc457fd56064087\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:07:03.594772 kubelet[1690]: I1002 19:07:03.594754 1690 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/162239232552f59e2bc457fd56064087-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"162239232552f59e2bc457fd56064087\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:07:03.594943 kubelet[1690]: I1002 19:07:03.594926 1690 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/162239232552f59e2bc457fd56064087-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"162239232552f59e2bc457fd56064087\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:07:03.604025 systemd[1]: Created slice kubepods-burstable-pod162239232552f59e2bc457fd56064087.slice. Oct 2 19:07:03.615241 systemd[1]: Created slice kubepods-burstable-podb619222ebfcfd1a0c9478200f0921497.slice. Oct 2 19:07:03.630872 systemd[1]: Created slice kubepods-burstable-pod6961ff1365464b1e2d286a48d6c5e40f.slice. Oct 2 19:07:03.695348 kubelet[1690]: I1002 19:07:03.695254 1690 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:03.695348 kubelet[1690]: I1002 19:07:03.695338 1690 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:03.695620 kubelet[1690]: I1002 19:07:03.695371 1690 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b619222ebfcfd1a0c9478200f0921497-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b619222ebfcfd1a0c9478200f0921497\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:07:03.695620 kubelet[1690]: I1002 19:07:03.695406 1690 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:03.695620 kubelet[1690]: I1002 19:07:03.695436 1690 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:03.695620 kubelet[1690]: I1002 19:07:03.695467 1690 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:03.755775 kubelet[1690]: W1002 19:07:03.755657 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:03.755775 kubelet[1690]: E1002 19:07:03.755714 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:03.912867 kubelet[1690]: E1002 19:07:03.912819 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:03.913826 env[1122]: time="2023-10-02T19:07:03.913705330Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:162239232552f59e2bc457fd56064087,Namespace:kube-system,Attempt:0,}" Oct 2 19:07:03.927783 kubelet[1690]: E1002 19:07:03.927715 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:03.928544 env[1122]: time="2023-10-02T19:07:03.928480614Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b619222ebfcfd1a0c9478200f0921497,Namespace:kube-system,Attempt:0,}" Oct 2 19:07:03.935035 kubelet[1690]: E1002 19:07:03.934953 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:03.935760 env[1122]: time="2023-10-02T19:07:03.935686245Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:6961ff1365464b1e2d286a48d6c5e40f,Namespace:kube-system,Attempt:0,}" Oct 2 19:07:03.976572 kubelet[1690]: W1002 19:07:03.973588 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:03.976572 kubelet[1690]: E1002 19:07:03.973686 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:04.072809 kubelet[1690]: W1002 19:07:04.072723 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.35:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:04.072809 kubelet[1690]: E1002 19:07:04.072786 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.35:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:04.146541 kubelet[1690]: W1002 19:07:04.146448 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:04.146541 kubelet[1690]: E1002 19:07:04.146538 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:04.203676 kubelet[1690]: E1002 19:07:04.203503 1690 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.35:6443: connect: connection refused" interval="1.6s" Oct 2 19:07:04.303945 kubelet[1690]: I1002 19:07:04.303891 1690 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:07:04.304279 kubelet[1690]: E1002 19:07:04.304256 1690 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.35:6443/api/v1/nodes\": dial tcp 10.0.0.35:6443: connect: connection refused" node="localhost" Oct 2 19:07:04.779576 kubelet[1690]: E1002 19:07:04.779492 1690 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.35:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:05.260082 kubelet[1690]: E1002 19:07:05.259926 1690 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a5fdf674ccc11", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 7, 2, 773845009, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 7, 2, 773845009, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"localhost"}': 'Post "https://10.0.0.35:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.35:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:07:05.804161 kubelet[1690]: E1002 19:07:05.804087 1690 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.35:6443: connect: connection refused" interval="3.2s" Oct 2 19:07:05.906344 kubelet[1690]: I1002 19:07:05.906294 1690 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:07:05.906818 kubelet[1690]: E1002 19:07:05.906722 1690 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.35:6443/api/v1/nodes\": dial tcp 10.0.0.35:6443: connect: connection refused" node="localhost" Oct 2 19:07:06.101207 kubelet[1690]: W1002 19:07:06.101033 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:06.101207 kubelet[1690]: E1002 19:07:06.101094 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:06.419606 kubelet[1690]: W1002 19:07:06.419540 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.35:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:06.419606 kubelet[1690]: E1002 19:07:06.419593 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.35:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:06.575087 kubelet[1690]: W1002 19:07:06.575008 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:06.575087 kubelet[1690]: E1002 19:07:06.575062 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:07.125787 kubelet[1690]: W1002 19:07:07.125711 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:07.125787 kubelet[1690]: E1002 19:07:07.125768 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:08.763354 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount365050712.mount: Deactivated successfully. Oct 2 19:07:09.007884 kubelet[1690]: E1002 19:07:09.007782 1690 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.35:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.35:6443: connect: connection refused" interval="6.4s" Oct 2 19:07:09.091014 kubelet[1690]: E1002 19:07:09.090784 1690 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.35:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:09.122361 kubelet[1690]: I1002 19:07:09.113543 1690 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:07:09.122361 kubelet[1690]: E1002 19:07:09.113966 1690 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.35:6443/api/v1/nodes\": dial tcp 10.0.0.35:6443: connect: connection refused" node="localhost" Oct 2 19:07:09.378342 env[1122]: time="2023-10-02T19:07:09.376776465Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:09.647953 env[1122]: time="2023-10-02T19:07:09.647255074Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:09.704033 env[1122]: time="2023-10-02T19:07:09.703958552Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:09.763978 env[1122]: time="2023-10-02T19:07:09.754436323Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:09.793378 kubelet[1690]: W1002 19:07:09.793301 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:09.793378 kubelet[1690]: E1002 19:07:09.793362 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.35:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:09.973816 env[1122]: time="2023-10-02T19:07:09.972177069Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:10.004672 env[1122]: time="2023-10-02T19:07:10.003236692Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:10.050112 env[1122]: time="2023-10-02T19:07:10.048782650Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:10.086406 env[1122]: time="2023-10-02T19:07:10.086301143Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:10.097559 env[1122]: time="2023-10-02T19:07:10.097464236Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:10.262755 env[1122]: time="2023-10-02T19:07:10.262568530Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:10.330578 env[1122]: time="2023-10-02T19:07:10.329138764Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:10.458751 env[1122]: time="2023-10-02T19:07:10.458641311Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:11.168258 env[1122]: time="2023-10-02T19:07:11.167835195Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:07:11.168258 env[1122]: time="2023-10-02T19:07:11.167914554Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:07:11.168258 env[1122]: time="2023-10-02T19:07:11.167931656Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:07:11.169332 env[1122]: time="2023-10-02T19:07:11.168334942Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8ca8cb00b50ea2e8056232498577b2dd4bc85fa26950b475102830448c15dd14 pid=1730 runtime=io.containerd.runc.v2 Oct 2 19:07:11.207877 systemd[1]: Started cri-containerd-8ca8cb00b50ea2e8056232498577b2dd4bc85fa26950b475102830448c15dd14.scope. Oct 2 19:07:11.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.535610 kernel: kauditd_printk_skb: 217 callbacks suppressed Oct 2 19:07:11.535714 kernel: audit: type=1400 audit(1696273631.530:586): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.535749 kernel: audit: type=1400 audit(1696273631.530:587): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541835 kernel: audit: type=1400 audit(1696273631.531:588): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541995 kernel: audit: type=1400 audit(1696273631.531:589): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.546761 kernel: audit: type=1400 audit(1696273631.531:590): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.546936 kernel: audit: type=1400 audit(1696273631.531:591): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.549168 kernel: audit: type=1400 audit(1696273631.531:592): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551713 kernel: audit: type=1400 audit(1696273631.531:593): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.554286 kernel: audit: type=1400 audit(1696273631.531:594): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.556769 kernel: audit: type=1400 audit(1696273631.535:595): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.535000 audit: BPF prog-id=64 op=LOAD Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1730 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:11.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613863623030623530656132653830353632333234393835373762 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1730 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:11.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613863623030623530656132653830353632333234393835373762 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.536000 audit: BPF prog-id=65 op=LOAD Oct 2 19:07:11.536000 audit[1742]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0003d0820 items=0 ppid=1730 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:11.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613863623030623530656132653830353632333234393835373762 Oct 2 19:07:11.541000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.541000 audit: BPF prog-id=66 op=LOAD Oct 2 19:07:11.541000 audit[1742]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0003d0868 items=0 ppid=1730 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:11.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613863623030623530656132653830353632333234393835373762 Oct 2 19:07:11.551000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:07:11.551000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { perfmon } for pid=1742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit[1742]: AVC avc: denied { bpf } for pid=1742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:11.551000 audit: BPF prog-id=67 op=LOAD Oct 2 19:07:11.551000 audit[1742]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0003d0c78 items=0 ppid=1730 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:11.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613863623030623530656132653830353632333234393835373762 Oct 2 19:07:11.588165 kubelet[1690]: W1002 19:07:11.587866 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.35:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:11.588165 kubelet[1690]: E1002 19:07:11.587946 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.35:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:11.654313 env[1122]: time="2023-10-02T19:07:11.654250347Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:162239232552f59e2bc457fd56064087,Namespace:kube-system,Attempt:0,} returns sandbox id \"8ca8cb00b50ea2e8056232498577b2dd4bc85fa26950b475102830448c15dd14\"" Oct 2 19:07:11.655598 kubelet[1690]: E1002 19:07:11.655562 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:11.658800 env[1122]: time="2023-10-02T19:07:11.658744513Z" level=info msg="CreateContainer within sandbox \"8ca8cb00b50ea2e8056232498577b2dd4bc85fa26950b475102830448c15dd14\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:07:11.899393 env[1122]: time="2023-10-02T19:07:11.894798012Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:07:11.899393 env[1122]: time="2023-10-02T19:07:11.894908208Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:07:11.899393 env[1122]: time="2023-10-02T19:07:11.894985794Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:07:11.899393 env[1122]: time="2023-10-02T19:07:11.895572492Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/77bacc410a37a84eeaf2018aa2e781271d5c82aaa01afc00931fdd037dee3c06 pid=1771 runtime=io.containerd.runc.v2 Oct 2 19:07:12.051432 systemd[1]: Started cri-containerd-77bacc410a37a84eeaf2018aa2e781271d5c82aaa01afc00931fdd037dee3c06.scope. Oct 2 19:07:12.057976 env[1122]: time="2023-10-02T19:07:12.056317269Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:07:12.057976 env[1122]: time="2023-10-02T19:07:12.056387440Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:07:12.057976 env[1122]: time="2023-10-02T19:07:12.056402409Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:07:12.063183 env[1122]: time="2023-10-02T19:07:12.061518420Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ecb15099a40a982f7b1192b942af8c4b9eb0e6fa64c2652b727a97236473d308 pid=1798 runtime=io.containerd.runc.v2 Oct 2 19:07:12.139475 kubelet[1690]: W1002 19:07:12.139338 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:12.139475 kubelet[1690]: E1002 19:07:12.139388 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.35:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:12.165783 systemd[1]: Started cri-containerd-ecb15099a40a982f7b1192b942af8c4b9eb0e6fa64c2652b727a97236473d308.scope. Oct 2 19:07:12.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit: BPF prog-id=68 op=LOAD Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1771 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737626163633431306133376138346565616632303138616132653738 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1771 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737626163633431306133376138346565616632303138616132653738 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.294000 audit: BPF prog-id=69 op=LOAD Oct 2 19:07:12.294000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00028a770 items=0 ppid=1771 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737626163633431306133376138346565616632303138616132653738 Oct 2 19:07:12.299000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.299000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.299000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.299000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.299000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.299000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.299000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.299000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.299000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.299000 audit: BPF prog-id=70 op=LOAD Oct 2 19:07:12.299000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00028a7b8 items=0 ppid=1771 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737626163633431306133376138346565616632303138616132653738 Oct 2 19:07:12.300000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:07:12.300000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { perfmon } for pid=1782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit[1782]: AVC avc: denied { bpf } for pid=1782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.301000 audit: BPF prog-id=71 op=LOAD Oct 2 19:07:12.301000 audit[1782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00028abc8 items=0 ppid=1771 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737626163633431306133376138346565616632303138616132653738 Oct 2 19:07:12.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.340000 audit: BPF prog-id=72 op=LOAD Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1798 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563623135303939613430613938326637623131393262393432616638 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1798 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563623135303939613430613938326637623131393262393432616638 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.341000 audit: BPF prog-id=73 op=LOAD Oct 2 19:07:12.341000 audit[1810]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024910 items=0 ppid=1798 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563623135303939613430613938326637623131393262393432616638 Oct 2 19:07:12.342000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.342000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.342000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.342000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.342000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.342000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.342000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.342000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.342000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.342000 audit: BPF prog-id=74 op=LOAD Oct 2 19:07:12.342000 audit[1810]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024958 items=0 ppid=1798 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563623135303939613430613938326637623131393262393432616638 Oct 2 19:07:12.343000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:07:12.343000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { perfmon } for pid=1810 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.351708 env[1122]: time="2023-10-02T19:07:12.349196624Z" level=info msg="CreateContainer within sandbox \"8ca8cb00b50ea2e8056232498577b2dd4bc85fa26950b475102830448c15dd14\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d4e942d5f36bebb89ced1ea8c6cd728d4c8574a3ad52a87c77af243319d55d42\"" Oct 2 19:07:12.351708 env[1122]: time="2023-10-02T19:07:12.350164647Z" level=info msg="StartContainer for \"d4e942d5f36bebb89ced1ea8c6cd728d4c8574a3ad52a87c77af243319d55d42\"" Oct 2 19:07:12.343000 audit[1810]: AVC avc: denied { bpf } for pid=1810 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.343000 audit: BPF prog-id=75 op=LOAD Oct 2 19:07:12.343000 audit[1810]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000024d68 items=0 ppid=1798 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563623135303939613430613938326637623131393262393432616638 Oct 2 19:07:12.402147 systemd[1]: Started cri-containerd-d4e942d5f36bebb89ced1ea8c6cd728d4c8574a3ad52a87c77af243319d55d42.scope. Oct 2 19:07:12.461487 env[1122]: time="2023-10-02T19:07:12.461407651Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b619222ebfcfd1a0c9478200f0921497,Namespace:kube-system,Attempt:0,} returns sandbox id \"77bacc410a37a84eeaf2018aa2e781271d5c82aaa01afc00931fdd037dee3c06\"" Oct 2 19:07:12.462327 kubelet[1690]: E1002 19:07:12.462296 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:12.464450 env[1122]: time="2023-10-02T19:07:12.464395657Z" level=info msg="CreateContainer within sandbox \"77bacc410a37a84eeaf2018aa2e781271d5c82aaa01afc00931fdd037dee3c06\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:07:12.478428 env[1122]: time="2023-10-02T19:07:12.478374588Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:6961ff1365464b1e2d286a48d6c5e40f,Namespace:kube-system,Attempt:0,} returns sandbox id \"ecb15099a40a982f7b1192b942af8c4b9eb0e6fa64c2652b727a97236473d308\"" Oct 2 19:07:12.479739 kubelet[1690]: E1002 19:07:12.479596 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:12.484441 env[1122]: time="2023-10-02T19:07:12.484370277Z" level=info msg="CreateContainer within sandbox \"ecb15099a40a982f7b1192b942af8c4b9eb0e6fa64c2652b727a97236473d308\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:07:12.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.520000 audit: BPF prog-id=76 op=LOAD Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1730 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653934326435663336626562623839636564316561386336636437 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1730 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653934326435663336626562623839636564316561386336636437 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.522000 audit: BPF prog-id=77 op=LOAD Oct 2 19:07:12.522000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000386c00 items=0 ppid=1730 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653934326435663336626562623839636564316561386336636437 Oct 2 19:07:12.528000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.528000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.528000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.528000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.528000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.528000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.528000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.528000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.528000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.528000 audit: BPF prog-id=78 op=LOAD Oct 2 19:07:12.528000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000386c48 items=0 ppid=1730 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653934326435663336626562623839636564316561386336636437 Oct 2 19:07:12.530000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:07:12.530000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { perfmon } for pid=1842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit[1842]: AVC avc: denied { bpf } for pid=1842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.530000 audit: BPF prog-id=79 op=LOAD Oct 2 19:07:12.530000 audit[1842]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000387058 items=0 ppid=1730 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434653934326435663336626562623839636564316561386336636437 Oct 2 19:07:12.591318 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3271739256.mount: Deactivated successfully. Oct 2 19:07:12.634277 env[1122]: time="2023-10-02T19:07:12.634191894Z" level=info msg="StartContainer for \"d4e942d5f36bebb89ced1ea8c6cd728d4c8574a3ad52a87c77af243319d55d42\" returns successfully" Oct 2 19:07:12.702225 kubelet[1690]: W1002 19:07:12.701963 1690 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:12.702225 kubelet[1690]: E1002 19:07:12.702051 1690 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.35:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.35:6443: connect: connection refused Oct 2 19:07:12.712721 env[1122]: time="2023-10-02T19:07:12.712649244Z" level=info msg="CreateContainer within sandbox \"77bacc410a37a84eeaf2018aa2e781271d5c82aaa01afc00931fdd037dee3c06\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"b8c30f639e8045cef79d167268886ee9ce5c3d989ef9825b4711488ec3a6a1bb\"" Oct 2 19:07:12.728150 env[1122]: time="2023-10-02T19:07:12.725597053Z" level=info msg="StartContainer for \"b8c30f639e8045cef79d167268886ee9ce5c3d989ef9825b4711488ec3a6a1bb\"" Oct 2 19:07:12.799323 env[1122]: time="2023-10-02T19:07:12.770983196Z" level=info msg="CreateContainer within sandbox \"ecb15099a40a982f7b1192b942af8c4b9eb0e6fa64c2652b727a97236473d308\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"825e7786516cb8578f27fc9804f4db94a3589bce44fbf27ee986713d4827f6c4\"" Oct 2 19:07:12.799323 env[1122]: time="2023-10-02T19:07:12.771828239Z" level=info msg="StartContainer for \"825e7786516cb8578f27fc9804f4db94a3589bce44fbf27ee986713d4827f6c4\"" Oct 2 19:07:12.799077 systemd[1]: Started cri-containerd-b8c30f639e8045cef79d167268886ee9ce5c3d989ef9825b4711488ec3a6a1bb.scope. Oct 2 19:07:12.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.864000 audit: BPF prog-id=80 op=LOAD Oct 2 19:07:12.864000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.864000 audit[1895]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1771 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238633330663633396538303435636566373964313637323638383836 Oct 2 19:07:12.864000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.864000 audit[1895]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1771 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238633330663633396538303435636566373964313637323638383836 Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.885638 systemd[1]: Started cri-containerd-825e7786516cb8578f27fc9804f4db94a3589bce44fbf27ee986713d4827f6c4.scope. Oct 2 19:07:12.866000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.866000 audit: BPF prog-id=81 op=LOAD Oct 2 19:07:12.866000 audit[1895]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003cc370 items=0 ppid=1771 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238633330663633396538303435636566373964313637323638383836 Oct 2 19:07:12.889000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.889000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.889000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.889000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.889000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.889000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.889000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.889000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.889000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.889000 audit: BPF prog-id=82 op=LOAD Oct 2 19:07:12.889000 audit[1895]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00019fe08 items=0 ppid=1771 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238633330663633396538303435636566373964313637323638383836 Oct 2 19:07:12.890000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:07:12.890000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { perfmon } for pid=1895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit[1895]: AVC avc: denied { bpf } for pid=1895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.890000 audit: BPF prog-id=83 op=LOAD Oct 2 19:07:12.890000 audit[1895]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001c6218 items=0 ppid=1771 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238633330663633396538303435636566373964313637323638383836 Oct 2 19:07:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit: BPF prog-id=84 op=LOAD Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1798 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832356537373836353136636238353738663237666339383034663464 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=1798 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832356537373836353136636238353738663237666339383034663464 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.928000 audit: BPF prog-id=85 op=LOAD Oct 2 19:07:12.928000 audit[1918]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003d02c0 items=0 ppid=1798 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832356537373836353136636238353738663237666339383034663464 Oct 2 19:07:12.930000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.930000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.930000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.930000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.930000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.930000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.930000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.930000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.930000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.930000 audit: BPF prog-id=86 op=LOAD Oct 2 19:07:12.930000 audit[1918]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003d0308 items=0 ppid=1798 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832356537373836353136636238353738663237666339383034663464 Oct 2 19:07:12.934000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:07:12.934000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { perfmon } for pid=1918 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit[1918]: AVC avc: denied { bpf } for pid=1918 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:12.934000 audit: BPF prog-id=87 op=LOAD Oct 2 19:07:12.934000 audit[1918]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003d0718 items=0 ppid=1798 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:12.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832356537373836353136636238353738663237666339383034663464 Oct 2 19:07:12.971689 kubelet[1690]: E1002 19:07:12.953291 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:13.059369 env[1122]: time="2023-10-02T19:07:13.059043154Z" level=info msg="StartContainer for \"b8c30f639e8045cef79d167268886ee9ce5c3d989ef9825b4711488ec3a6a1bb\" returns successfully" Oct 2 19:07:13.083564 env[1122]: time="2023-10-02T19:07:13.083493069Z" level=info msg="StartContainer for \"825e7786516cb8578f27fc9804f4db94a3589bce44fbf27ee986713d4827f6c4\" returns successfully" Oct 2 19:07:13.374541 kubelet[1690]: E1002 19:07:13.374363 1690 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:07:14.005937 kubelet[1690]: E1002 19:07:14.005902 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:14.009585 kubelet[1690]: E1002 19:07:14.009551 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:14.010464 kubelet[1690]: E1002 19:07:14.010370 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:14.390000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:14.390000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000afa960 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:14.390000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:14.390000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:14.390000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0004a9c80 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:14.390000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:15.025670 kubelet[1690]: E1002 19:07:15.025632 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:15.027463 kubelet[1690]: E1002 19:07:15.026904 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:15.027620 kubelet[1690]: E1002 19:07:15.027358 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:15.517376 kubelet[1690]: I1002 19:07:15.516281 1690 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:07:16.434000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:16.434000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00441c000 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:07:16.434000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:16.434000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:16.434000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c005f0c040 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:07:16.434000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:16.434000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:16.434000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c008a2d350 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:07:16.434000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:16.441000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:16.441000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c003965ad0 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:07:16.441000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:16.488361 kubelet[1690]: E1002 19:07:16.488273 1690 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:07:16.500000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:16.500000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c005f0dba0 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:07:16.500000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:16.501000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:16.501000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c0063ceae0 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:07:16.501000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:16.574828 kubelet[1690]: I1002 19:07:16.574777 1690 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:07:16.624690 kubelet[1690]: E1002 19:07:16.624585 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:16.694484 kubelet[1690]: E1002 19:07:16.694116 1690 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a5fdf674ccc11", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 7, 2, 773845009, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 7, 2, 773845009, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"localhost"}': 'namespaces "default" not found' (will not retry!) Oct 2 19:07:16.725110 kubelet[1690]: E1002 19:07:16.724909 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:16.830879 kubelet[1690]: E1002 19:07:16.827837 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:16.932614 kubelet[1690]: E1002 19:07:16.928074 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.038056 kubelet[1690]: E1002 19:07:17.031160 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.133131 kubelet[1690]: E1002 19:07:17.132949 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.235937 kubelet[1690]: E1002 19:07:17.235784 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.313667 kubelet[1690]: E1002 19:07:17.313536 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:17.340074 kubelet[1690]: E1002 19:07:17.339805 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.453690 kubelet[1690]: E1002 19:07:17.452951 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.554988 kubelet[1690]: E1002 19:07:17.554929 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.656104 kubelet[1690]: E1002 19:07:17.655897 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.763712 kubelet[1690]: E1002 19:07:17.763553 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.864507 kubelet[1690]: E1002 19:07:17.864080 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:17.968223 kubelet[1690]: E1002 19:07:17.967743 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.070537 kubelet[1690]: E1002 19:07:18.067902 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.168229 kubelet[1690]: E1002 19:07:18.168050 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.269950 kubelet[1690]: E1002 19:07:18.269743 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.371798 kubelet[1690]: E1002 19:07:18.371635 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.475040 kubelet[1690]: E1002 19:07:18.474890 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.575628 kubelet[1690]: E1002 19:07:18.575461 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.685116 kubelet[1690]: E1002 19:07:18.682693 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.786817 kubelet[1690]: E1002 19:07:18.786513 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.889816 kubelet[1690]: E1002 19:07:18.887332 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:18.992877 kubelet[1690]: E1002 19:07:18.989716 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:19.092805 kubelet[1690]: E1002 19:07:19.092726 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:19.195253 kubelet[1690]: E1002 19:07:19.195158 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:19.298239 kubelet[1690]: E1002 19:07:19.297972 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:19.419759 kubelet[1690]: E1002 19:07:19.405811 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:19.517692 kubelet[1690]: E1002 19:07:19.517100 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:19.619736 kubelet[1690]: E1002 19:07:19.619684 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:19.724155 kubelet[1690]: E1002 19:07:19.720437 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:19.822172 kubelet[1690]: E1002 19:07:19.821102 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:19.924054 kubelet[1690]: E1002 19:07:19.923757 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.025056 kubelet[1690]: E1002 19:07:20.024964 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.125917 kubelet[1690]: E1002 19:07:20.125681 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.226834 kubelet[1690]: E1002 19:07:20.226795 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.328402 kubelet[1690]: E1002 19:07:20.328247 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.439562 kubelet[1690]: E1002 19:07:20.429061 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.530108 kubelet[1690]: E1002 19:07:20.530014 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.632042 kubelet[1690]: E1002 19:07:20.631965 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.735966 kubelet[1690]: E1002 19:07:20.735762 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.837221 kubelet[1690]: E1002 19:07:20.837111 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:20.938964 kubelet[1690]: E1002 19:07:20.938864 1690 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:21.797281 kubelet[1690]: I1002 19:07:21.796843 1690 apiserver.go:52] "Watching apiserver" Oct 2 19:07:21.874687 kubelet[1690]: E1002 19:07:21.873885 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:21.892182 kubelet[1690]: I1002 19:07:21.892126 1690 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:07:22.071976 kubelet[1690]: E1002 19:07:22.070798 1690 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:22.391710 systemd[1]: Reloading. Oct 2 19:07:22.562485 /usr/lib/systemd/system-generators/torcx-generator[1997]: time="2023-10-02T19:07:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:07:22.563245 /usr/lib/systemd/system-generators/torcx-generator[1997]: time="2023-10-02T19:07:22Z" level=info msg="torcx already run" Oct 2 19:07:22.795730 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:07:22.796026 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:07:22.873357 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:07:22.932640 kernel: kauditd_printk_skb: 356 callbacks suppressed Oct 2 19:07:22.932823 kernel: audit: type=1400 audit(1696273642.926:702): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:22.926000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:22.933000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:22.954245 kernel: audit: type=1400 audit(1696273642.933:703): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:22.954421 kernel: audit: type=1300 audit(1696273642.926:702): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00086d640 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:22.926000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00086d640 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:22.954624 kubelet[1690]: I1002 19:07:22.943715 1690 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.943636938 podCreationTimestamp="2023-10-02 19:07:21 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:07:22.943560214 +0000 UTC m=+21.056593711" watchObservedRunningTime="2023-10-02 19:07:22.943636938 +0000 UTC m=+21.056670435" Oct 2 19:07:22.926000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:22.965346 kernel: audit: type=1327 audit(1696273642.926:702): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:22.939000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:22.970026 kernel: audit: type=1400 audit(1696273642.939:704): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:22.939000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00086dba0 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:22.939000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:22.979657 kernel: audit: type=1300 audit(1696273642.939:704): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00086dba0 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:22.979809 kernel: audit: type=1327 audit(1696273642.939:704): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:22.979872 kernel: audit: type=1400 audit(1696273642.940:705): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:22.940000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:22.991223 kernel: audit: type=1300 audit(1696273642.940:705): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00086dce0 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:22.940000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00086dce0 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:22.940000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:23.001662 kernel: audit: type=1327 audit(1696273642.940:705): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:22.933000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00086da60 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:22.933000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:23.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.029000 audit: BPF prog-id=88 op=LOAD Oct 2 19:07:23.029000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:07:23.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.030000 audit: BPF prog-id=89 op=LOAD Oct 2 19:07:23.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.031000 audit: BPF prog-id=90 op=LOAD Oct 2 19:07:23.031000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:07:23.031000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:07:23.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit: BPF prog-id=91 op=LOAD Oct 2 19:07:23.033000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.035000 audit: BPF prog-id=92 op=LOAD Oct 2 19:07:23.035000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:07:23.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.038000 audit: BPF prog-id=93 op=LOAD Oct 2 19:07:23.038000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:07:23.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit: BPF prog-id=94 op=LOAD Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.039000 audit: BPF prog-id=95 op=LOAD Oct 2 19:07:23.039000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:07:23.039000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:07:23.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit: BPF prog-id=96 op=LOAD Oct 2 19:07:23.041000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.046000 audit: BPF prog-id=97 op=LOAD Oct 2 19:07:23.046000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:07:23.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.050000 audit: BPF prog-id=98 op=LOAD Oct 2 19:07:23.050000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:07:23.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.054000 audit: BPF prog-id=99 op=LOAD Oct 2 19:07:23.054000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:07:23.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.056000 audit: BPF prog-id=100 op=LOAD Oct 2 19:07:23.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit: BPF prog-id=101 op=LOAD Oct 2 19:07:23.057000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:07:23.057000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.058000 audit: BPF prog-id=102 op=LOAD Oct 2 19:07:23.058000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:07:23.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.067000 audit: BPF prog-id=103 op=LOAD Oct 2 19:07:23.067000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.069000 audit: BPF prog-id=104 op=LOAD Oct 2 19:07:23.069000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.071000 audit: BPF prog-id=105 op=LOAD Oct 2 19:07:23.071000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit: BPF prog-id=106 op=LOAD Oct 2 19:07:23.072000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit: BPF prog-id=107 op=LOAD Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.073000 audit: BPF prog-id=108 op=LOAD Oct 2 19:07:23.073000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:07:23.073000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:07:23.093354 systemd[1]: Stopping kubelet.service... Oct 2 19:07:23.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:23.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:23.127986 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:07:23.128266 systemd[1]: Stopped kubelet.service. Oct 2 19:07:23.128345 systemd[1]: kubelet.service: Consumed 1.819s CPU time. Oct 2 19:07:23.130840 systemd[1]: Started kubelet.service. Oct 2 19:07:23.304021 kubelet[2034]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:07:23.304021 kubelet[2034]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:07:23.304021 kubelet[2034]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:07:23.304021 kubelet[2034]: I1002 19:07:23.303977 2034 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:07:23.319129 kubelet[2034]: I1002 19:07:23.318441 2034 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:07:23.320123 kubelet[2034]: I1002 19:07:23.320059 2034 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:07:23.321052 kubelet[2034]: I1002 19:07:23.321001 2034 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:07:23.324613 kubelet[2034]: I1002 19:07:23.324577 2034 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:07:23.337284 kubelet[2034]: I1002 19:07:23.337231 2034 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:07:23.352401 kubelet[2034]: I1002 19:07:23.352358 2034 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:07:23.352686 kubelet[2034]: I1002 19:07:23.352666 2034 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:07:23.352928 kubelet[2034]: I1002 19:07:23.352904 2034 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:07:23.353049 kubelet[2034]: I1002 19:07:23.352944 2034 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:07:23.353049 kubelet[2034]: I1002 19:07:23.352960 2034 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:07:23.353049 kubelet[2034]: I1002 19:07:23.353000 2034 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:07:23.353145 kubelet[2034]: I1002 19:07:23.353101 2034 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:07:23.353145 kubelet[2034]: I1002 19:07:23.353121 2034 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:07:23.353219 kubelet[2034]: I1002 19:07:23.353148 2034 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:07:23.353219 kubelet[2034]: I1002 19:07:23.353170 2034 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:07:23.367115 kubelet[2034]: I1002 19:07:23.362225 2034 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:07:23.367115 kubelet[2034]: I1002 19:07:23.363145 2034 server.go:1232] "Started kubelet" Oct 2 19:07:23.367115 kubelet[2034]: I1002 19:07:23.363589 2034 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:07:23.367115 kubelet[2034]: I1002 19:07:23.363645 2034 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:07:23.367115 kubelet[2034]: I1002 19:07:23.363933 2034 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:07:23.367115 kubelet[2034]: I1002 19:07:23.364389 2034 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:07:23.367115 kubelet[2034]: E1002 19:07:23.366414 2034 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:07:23.367115 kubelet[2034]: E1002 19:07:23.366456 2034 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:07:23.369621 kubelet[2034]: I1002 19:07:23.367787 2034 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:07:23.369621 kubelet[2034]: I1002 19:07:23.367828 2034 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:07:23.369621 kubelet[2034]: I1002 19:07:23.368446 2034 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:07:23.371438 kubelet[2034]: E1002 19:07:23.371408 2034 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:07:23.371683 kubelet[2034]: I1002 19:07:23.371665 2034 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:07:23.371924 kubelet[2034]: I1002 19:07:23.371906 2034 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:07:23.372177 kubelet[2034]: I1002 19:07:23.372162 2034 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:07:23.366000 audit[2034]: AVC avc: denied { mac_admin } for pid=2034 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.366000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:07:23.366000 audit[2034]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0003616b0 a1=c0007b08e8 a2=c000361680 a3=25 items=0 ppid=1 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:23.366000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:07:23.366000 audit[2034]: AVC avc: denied { mac_admin } for pid=2034 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.366000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:07:23.366000 audit[2034]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009c76a0 a1=c0007b0900 a2=c000361740 a3=25 items=0 ppid=1 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:23.366000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:07:23.401590 kubelet[2034]: I1002 19:07:23.401020 2034 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:07:23.404020 kubelet[2034]: I1002 19:07:23.403975 2034 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:07:23.404119 kubelet[2034]: I1002 19:07:23.404029 2034 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:07:23.404119 kubelet[2034]: I1002 19:07:23.404060 2034 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:07:23.404209 kubelet[2034]: E1002 19:07:23.404125 2034 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:07:23.486162 kubelet[2034]: I1002 19:07:23.486116 2034 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:07:23.501306 kubelet[2034]: I1002 19:07:23.501254 2034 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:07:23.501531 kubelet[2034]: I1002 19:07:23.501515 2034 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:07:23.501639 kubelet[2034]: I1002 19:07:23.501622 2034 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:07:23.501973 kubelet[2034]: I1002 19:07:23.501958 2034 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:07:23.502082 kubelet[2034]: I1002 19:07:23.502065 2034 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 19:07:23.502166 kubelet[2034]: I1002 19:07:23.502149 2034 policy_none.go:49] "None policy: Start" Oct 2 19:07:23.502292 kubelet[2034]: I1002 19:07:23.501279 2034 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:07:23.502444 kubelet[2034]: I1002 19:07:23.502428 2034 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:07:23.504413 kubelet[2034]: E1002 19:07:23.504356 2034 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:07:23.504536 kubelet[2034]: I1002 19:07:23.504513 2034 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:07:23.504613 kubelet[2034]: I1002 19:07:23.504541 2034 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:07:23.504737 kubelet[2034]: I1002 19:07:23.504707 2034 state_mem.go:75] "Updated machine memory state" Oct 2 19:07:23.543338 kubelet[2034]: I1002 19:07:23.543299 2034 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:07:23.542000 audit[2034]: AVC avc: denied { mac_admin } for pid=2034 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:23.542000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:07:23.542000 audit[2034]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000dd4180 a1=c000f95e00 a2=c000dd4150 a3=25 items=0 ppid=1 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:23.542000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:07:23.544067 kubelet[2034]: I1002 19:07:23.543640 2034 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:07:23.544941 kubelet[2034]: I1002 19:07:23.544919 2034 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:07:23.705560 kubelet[2034]: I1002 19:07:23.705479 2034 topology_manager.go:215] "Topology Admit Handler" podUID="162239232552f59e2bc457fd56064087" podNamespace="kube-system" podName="kube-apiserver-localhost" Oct 2 19:07:23.705828 kubelet[2034]: I1002 19:07:23.705659 2034 topology_manager.go:215] "Topology Admit Handler" podUID="6961ff1365464b1e2d286a48d6c5e40f" podNamespace="kube-system" podName="kube-controller-manager-localhost" Oct 2 19:07:23.705828 kubelet[2034]: I1002 19:07:23.705728 2034 topology_manager.go:215] "Topology Admit Handler" podUID="b619222ebfcfd1a0c9478200f0921497" podNamespace="kube-system" podName="kube-scheduler-localhost" Oct 2 19:07:23.734085 kubelet[2034]: E1002 19:07:23.733915 2034 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:07:23.787797 kubelet[2034]: I1002 19:07:23.786991 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/162239232552f59e2bc457fd56064087-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"162239232552f59e2bc457fd56064087\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:07:23.787797 kubelet[2034]: I1002 19:07:23.787068 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:23.787797 kubelet[2034]: I1002 19:07:23.787129 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:23.787797 kubelet[2034]: I1002 19:07:23.787159 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b619222ebfcfd1a0c9478200f0921497-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b619222ebfcfd1a0c9478200f0921497\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:07:23.787797 kubelet[2034]: I1002 19:07:23.787204 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:23.788604 kubelet[2034]: I1002 19:07:23.787229 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/162239232552f59e2bc457fd56064087-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"162239232552f59e2bc457fd56064087\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:07:23.788604 kubelet[2034]: I1002 19:07:23.787268 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/162239232552f59e2bc457fd56064087-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"162239232552f59e2bc457fd56064087\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:07:23.788604 kubelet[2034]: I1002 19:07:23.787293 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:23.788604 kubelet[2034]: I1002 19:07:23.787318 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6961ff1365464b1e2d286a48d6c5e40f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"6961ff1365464b1e2d286a48d6c5e40f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:07:24.026866 kubelet[2034]: E1002 19:07:24.026684 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:24.027957 kubelet[2034]: E1002 19:07:24.027933 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:24.043987 kubelet[2034]: E1002 19:07:24.041187 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:24.360723 kubelet[2034]: I1002 19:07:24.359938 2034 apiserver.go:52] "Watching apiserver" Oct 2 19:07:24.472500 kubelet[2034]: I1002 19:07:24.472419 2034 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:07:24.475000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32587 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:07:24.475000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0009e4a40 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:07:24.475000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:24.478156 kubelet[2034]: E1002 19:07:24.478124 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:24.483621 kubelet[2034]: E1002 19:07:24.483573 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:24.484111 kubelet[2034]: E1002 19:07:24.484093 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:24.561308 kubelet[2034]: I1002 19:07:24.561258 2034 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.561183777 podCreationTimestamp="2023-10-02 19:07:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:07:24.54397752 +0000 UTC m=+1.404012592" watchObservedRunningTime="2023-10-02 19:07:24.561183777 +0000 UTC m=+1.421218850" Oct 2 19:07:24.561536 kubelet[2034]: I1002 19:07:24.561401 2034 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.561362573 podCreationTimestamp="2023-10-02 19:07:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:07:24.560802954 +0000 UTC m=+1.420838036" watchObservedRunningTime="2023-10-02 19:07:24.561362573 +0000 UTC m=+1.421397645" Oct 2 19:07:25.482400 kubelet[2034]: E1002 19:07:25.482354 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:26.484276 kubelet[2034]: E1002 19:07:26.484242 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:26.839612 kubelet[2034]: E1002 19:07:26.838635 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:27.496418 kubelet[2034]: E1002 19:07:27.492467 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:27.496418 kubelet[2034]: E1002 19:07:27.493403 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:29.133311 sudo[1243]: pam_unix(sudo:session): session closed for user root Oct 2 19:07:29.135783 kernel: kauditd_printk_skb: 263 callbacks suppressed Oct 2 19:07:29.136034 kernel: audit: type=1106 audit(1696273649.132:956): pid=1243 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:29.132000 audit[1243]: USER_END pid=1243 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:29.132000 audit[1243]: CRED_DISP pid=1243 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:29.141524 kernel: audit: type=1104 audit(1696273649.132:957): pid=1243 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:29.140882 sshd[1240]: pam_unix(sshd:session): session closed for user core Oct 2 19:07:29.144775 kubelet[2034]: E1002 19:07:29.144743 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:29.148163 systemd[1]: sshd@6-10.0.0.35:22-10.0.0.1:57988.service: Deactivated successfully. Oct 2 19:07:29.149196 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:07:29.149440 systemd[1]: session-7.scope: Consumed 5.593s CPU time. Oct 2 19:07:29.145000 audit[1240]: USER_END pid=1240 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:07:29.153731 systemd-logind[1110]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:07:29.156456 systemd-logind[1110]: Removed session 7. Oct 2 19:07:29.145000 audit[1240]: CRED_DISP pid=1240 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:07:29.160699 kernel: audit: type=1106 audit(1696273649.145:958): pid=1240 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:07:29.160893 kernel: audit: type=1104 audit(1696273649.145:959): pid=1240 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:07:29.160923 kernel: audit: type=1131 audit(1696273649.147:960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.35:22-10.0.0.1:57988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:29.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.35:22-10.0.0.1:57988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:29.500089 kubelet[2034]: E1002 19:07:29.500053 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:36.481005 kubelet[2034]: I1002 19:07:36.480887 2034 topology_manager.go:215] "Topology Admit Handler" podUID="c73b14a9-7331-4a2b-8f74-6ab0afd7daf1" podNamespace="kube-system" podName="kube-proxy-67jl5" Oct 2 19:07:36.485151 systemd[1]: Created slice kubepods-besteffort-podc73b14a9_7331_4a2b_8f74_6ab0afd7daf1.slice. Oct 2 19:07:36.566867 kubelet[2034]: I1002 19:07:36.566804 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/c73b14a9-7331-4a2b-8f74-6ab0afd7daf1-kube-proxy\") pod \"kube-proxy-67jl5\" (UID: \"c73b14a9-7331-4a2b-8f74-6ab0afd7daf1\") " pod="kube-system/kube-proxy-67jl5" Oct 2 19:07:36.567061 kubelet[2034]: I1002 19:07:36.566881 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c73b14a9-7331-4a2b-8f74-6ab0afd7daf1-xtables-lock\") pod \"kube-proxy-67jl5\" (UID: \"c73b14a9-7331-4a2b-8f74-6ab0afd7daf1\") " pod="kube-system/kube-proxy-67jl5" Oct 2 19:07:36.567061 kubelet[2034]: I1002 19:07:36.566910 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c73b14a9-7331-4a2b-8f74-6ab0afd7daf1-lib-modules\") pod \"kube-proxy-67jl5\" (UID: \"c73b14a9-7331-4a2b-8f74-6ab0afd7daf1\") " pod="kube-system/kube-proxy-67jl5" Oct 2 19:07:36.567061 kubelet[2034]: I1002 19:07:36.566933 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8tk7r\" (UniqueName: \"kubernetes.io/projected/c73b14a9-7331-4a2b-8f74-6ab0afd7daf1-kube-api-access-8tk7r\") pod \"kube-proxy-67jl5\" (UID: \"c73b14a9-7331-4a2b-8f74-6ab0afd7daf1\") " pod="kube-system/kube-proxy-67jl5" Oct 2 19:07:36.578501 kubelet[2034]: I1002 19:07:36.578468 2034 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:07:36.578833 env[1122]: time="2023-10-02T19:07:36.578795730Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:07:36.579118 kubelet[2034]: I1002 19:07:36.578956 2034 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:07:36.792075 kubelet[2034]: E1002 19:07:36.791169 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:36.795432 env[1122]: time="2023-10-02T19:07:36.795366403Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-67jl5,Uid:c73b14a9-7331-4a2b-8f74-6ab0afd7daf1,Namespace:kube-system,Attempt:0,}" Oct 2 19:07:36.856158 kubelet[2034]: I1002 19:07:36.855695 2034 topology_manager.go:215] "Topology Admit Handler" podUID="6c267da0-605d-4949-9510-f43d1a96f65e" podNamespace="tigera-operator" podName="tigera-operator-8547bd6cc6-hcjdc" Oct 2 19:07:36.864309 env[1122]: time="2023-10-02T19:07:36.864220202Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:07:36.868841 env[1122]: time="2023-10-02T19:07:36.864544780Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:07:36.868841 env[1122]: time="2023-10-02T19:07:36.864581449Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:07:36.868841 env[1122]: time="2023-10-02T19:07:36.864744395Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5950105c5d76bd1d880766ee2679b03346a98d325dec54678203f311b01272c0 pid=2126 runtime=io.containerd.runc.v2 Oct 2 19:07:36.870126 systemd[1]: Created slice kubepods-besteffort-pod6c267da0_605d_4949_9510_f43d1a96f65e.slice. Oct 2 19:07:36.871292 kubelet[2034]: I1002 19:07:36.871262 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6c267da0-605d-4949-9510-f43d1a96f65e-var-lib-calico\") pod \"tigera-operator-8547bd6cc6-hcjdc\" (UID: \"6c267da0-605d-4949-9510-f43d1a96f65e\") " pod="tigera-operator/tigera-operator-8547bd6cc6-hcjdc" Oct 2 19:07:36.871429 kubelet[2034]: I1002 19:07:36.871410 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ztj7h\" (UniqueName: \"kubernetes.io/projected/6c267da0-605d-4949-9510-f43d1a96f65e-kube-api-access-ztj7h\") pod \"tigera-operator-8547bd6cc6-hcjdc\" (UID: \"6c267da0-605d-4949-9510-f43d1a96f65e\") " pod="tigera-operator/tigera-operator-8547bd6cc6-hcjdc" Oct 2 19:07:36.908066 systemd[1]: Started cri-containerd-5950105c5d76bd1d880766ee2679b03346a98d325dec54678203f311b01272c0.scope. Oct 2 19:07:36.969666 kernel: audit: type=1400 audit(1696273656.951:961): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.969832 kernel: audit: type=1400 audit(1696273656.951:962): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.969946 kernel: audit: type=1400 audit(1696273656.951:963): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.969986 kernel: audit: type=1400 audit(1696273656.951:964): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.990330 kernel: audit: type=1400 audit(1696273656.951:965): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.990516 kernel: audit: type=1400 audit(1696273656.951:966): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.014829 kernel: audit: type=1400 audit(1696273656.951:967): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.015003 kernel: audit: type=1400 audit(1696273656.951:968): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.015044 kernel: audit: type=1400 audit(1696273656.951:969): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.024019 kernel: audit: type=1400 audit(1696273656.963:970): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.963000 audit: BPF prog-id=109 op=LOAD Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2126 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:36.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539353031303563356437366264316438383037363665653236373962 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2126 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:36.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539353031303563356437366264316438383037363665653236373962 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.964000 audit: BPF prog-id=110 op=LOAD Oct 2 19:07:36.964000 audit[2136]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000382720 items=0 ppid=2126 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:36.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539353031303563356437366264316438383037363665653236373962 Oct 2 19:07:36.998000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.998000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.998000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.998000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.998000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.998000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.998000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.998000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.998000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:36.998000 audit: BPF prog-id=111 op=LOAD Oct 2 19:07:36.998000 audit[2136]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000382768 items=0 ppid=2126 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:36.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539353031303563356437366264316438383037363665653236373962 Oct 2 19:07:37.029000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:07:37.029000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { perfmon } for pid=2136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit[2136]: AVC avc: denied { bpf } for pid=2136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:37.029000 audit: BPF prog-id=112 op=LOAD Oct 2 19:07:37.029000 audit[2136]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000382b78 items=0 ppid=2126 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:37.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539353031303563356437366264316438383037363665653236373962 Oct 2 19:07:37.092365 env[1122]: time="2023-10-02T19:07:37.090292632Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-67jl5,Uid:c73b14a9-7331-4a2b-8f74-6ab0afd7daf1,Namespace:kube-system,Attempt:0,} returns sandbox id \"5950105c5d76bd1d880766ee2679b03346a98d325dec54678203f311b01272c0\"" Oct 2 19:07:37.095215 kubelet[2034]: E1002 19:07:37.093496 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:37.098130 env[1122]: time="2023-10-02T19:07:37.097694950Z" level=info msg="CreateContainer within sandbox \"5950105c5d76bd1d880766ee2679b03346a98d325dec54678203f311b01272c0\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:07:37.187776 env[1122]: time="2023-10-02T19:07:37.187384676Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-8547bd6cc6-hcjdc,Uid:6c267da0-605d-4949-9510-f43d1a96f65e,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:07:38.054435 env[1122]: time="2023-10-02T19:07:38.054359696Z" level=info msg="CreateContainer within sandbox \"5950105c5d76bd1d880766ee2679b03346a98d325dec54678203f311b01272c0\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"e669b7aa150c8c397d022b7c9355a58c65f4a05e7e89268696dce96e59c8f151\"" Oct 2 19:07:38.059229 env[1122]: time="2023-10-02T19:07:38.058499858Z" level=info msg="StartContainer for \"e669b7aa150c8c397d022b7c9355a58c65f4a05e7e89268696dce96e59c8f151\"" Oct 2 19:07:38.096404 env[1122]: time="2023-10-02T19:07:38.095978719Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:07:38.098778 env[1122]: time="2023-10-02T19:07:38.096486660Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:07:38.098778 env[1122]: time="2023-10-02T19:07:38.096523579Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:07:38.098778 env[1122]: time="2023-10-02T19:07:38.096888554Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6 pid=2173 runtime=io.containerd.runc.v2 Oct 2 19:07:38.128405 systemd[1]: Started cri-containerd-e669b7aa150c8c397d022b7c9355a58c65f4a05e7e89268696dce96e59c8f151.scope. Oct 2 19:07:38.184060 systemd[1]: Started cri-containerd-08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6.scope. Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2126 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536363962376161313530633863333937643032326237633933353561 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.186000 audit: BPF prog-id=113 op=LOAD Oct 2 19:07:38.186000 audit[2172]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003ca120 items=0 ppid=2126 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536363962376161313530633863333937643032326237633933353561 Oct 2 19:07:38.192000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.192000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.192000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.192000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.192000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.192000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.192000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.192000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.192000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.192000 audit: BPF prog-id=114 op=LOAD Oct 2 19:07:38.192000 audit[2172]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0003ca168 items=0 ppid=2126 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536363962376161313530633863333937643032326237633933353561 Oct 2 19:07:38.212000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:07:38.212000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { perfmon } for pid=2172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.216000 audit: BPF prog-id=115 op=LOAD Oct 2 19:07:38.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.220000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2173 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038663762613037383935393265646236613535323933343135626566 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2173 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038663762613037383935393265646236613535323933343135626566 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit[2172]: AVC avc: denied { bpf } for pid=2172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.212000 audit: BPF prog-id=116 op=LOAD Oct 2 19:07:38.212000 audit[2172]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003ca1f8 items=0 ppid=2126 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536363962376161313530633863333937643032326237633933353561 Oct 2 19:07:38.221000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.221000 audit: BPF prog-id=117 op=LOAD Oct 2 19:07:38.221000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000298340 items=0 ppid=2173 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038663762613037383935393265646236613535323933343135626566 Oct 2 19:07:38.226000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.226000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.226000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.226000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.226000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.226000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.226000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.226000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.226000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.226000 audit: BPF prog-id=118 op=LOAD Oct 2 19:07:38.226000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000298388 items=0 ppid=2173 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038663762613037383935393265646236613535323933343135626566 Oct 2 19:07:38.232000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:07:38.233000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:38.233000 audit: BPF prog-id=119 op=LOAD Oct 2 19:07:38.233000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000298798 items=0 ppid=2173 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038663762613037383935393265646236613535323933343135626566 Oct 2 19:07:38.295448 env[1122]: time="2023-10-02T19:07:38.294542925Z" level=info msg="StartContainer for \"e669b7aa150c8c397d022b7c9355a58c65f4a05e7e89268696dce96e59c8f151\" returns successfully" Oct 2 19:07:38.368467 env[1122]: time="2023-10-02T19:07:38.368274624Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-8547bd6cc6-hcjdc,Uid:6c267da0-605d-4949-9510-f43d1a96f65e,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\"" Oct 2 19:07:38.372076 env[1122]: time="2023-10-02T19:07:38.370294701Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:07:38.461000 audit[2257]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.461000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd63998160 a2=0 a3=7ffd6399814c items=0 ppid=2197 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.461000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:07:38.469000 audit[2258]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.469000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd2133e2f0 a2=0 a3=7ffd2133e2dc items=0 ppid=2197 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.469000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:07:38.473000 audit[2259]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.473000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff39197fd0 a2=0 a3=7fff39197fbc items=0 ppid=2197 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.473000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:07:38.473000 audit[2260]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.473000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd71591840 a2=0 a3=7ffd7159182c items=0 ppid=2197 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.473000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:07:38.476000 audit[2261]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.476000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc150f2ca0 a2=0 a3=7ffc150f2c8c items=0 ppid=2197 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.476000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:07:38.477000 audit[2262]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.477000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff2525e370 a2=0 a3=7fff2525e35c items=0 ppid=2197 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.477000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:07:38.533823 kubelet[2034]: E1002 19:07:38.533373 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:38.567000 audit[2263]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.567000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe1cd03600 a2=0 a3=7ffe1cd035ec items=0 ppid=2197 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:07:38.570000 audit[2265]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.570000 audit[2265]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff04c83810 a2=0 a3=7fff04c837fc items=0 ppid=2197 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.570000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:07:38.579000 audit[2268]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2268 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.579000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcfb65e500 a2=0 a3=7ffcfb65e4ec items=0 ppid=2197 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.579000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:07:38.585000 audit[2269]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.585000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8481e7c0 a2=0 a3=7ffd8481e7ac items=0 ppid=2197 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.585000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:07:38.592000 audit[2271]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2271 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.592000 audit[2271]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd31ee4d70 a2=0 a3=7ffd31ee4d5c items=0 ppid=2197 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.592000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:07:38.594000 audit[2272]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.594000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5c00d440 a2=0 a3=7ffd5c00d42c items=0 ppid=2197 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.594000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:07:38.601000 audit[2274]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.601000 audit[2274]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff733086a0 a2=0 a3=7fff7330868c items=0 ppid=2197 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.601000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:07:38.615000 audit[2277]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2277 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.615000 audit[2277]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff49637070 a2=0 a3=7fff4963705c items=0 ppid=2197 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.615000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:07:38.619000 audit[2278]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.619000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb673b4a0 a2=0 a3=7ffeb673b48c items=0 ppid=2197 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.619000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:07:38.623043 kubelet[2034]: I1002 19:07:38.617195 2034 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-67jl5" podStartSLOduration=2.617146642 podCreationTimestamp="2023-10-02 19:07:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:07:38.61692721 +0000 UTC m=+15.476962293" watchObservedRunningTime="2023-10-02 19:07:38.617146642 +0000 UTC m=+15.477181714" Oct 2 19:07:38.643000 audit[2280]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.643000 audit[2280]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffefe528d90 a2=0 a3=7ffefe528d7c items=0 ppid=2197 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.643000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:07:38.653000 audit[2281]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.653000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdb0c2b630 a2=0 a3=7ffdb0c2b61c items=0 ppid=2197 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.653000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:07:38.662000 audit[2283]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.662000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc0b700360 a2=0 a3=7ffc0b70034c items=0 ppid=2197 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.662000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:07:38.668000 audit[2286]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.668000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe274db700 a2=0 a3=7ffe274db6ec items=0 ppid=2197 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.668000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:07:38.673000 audit[2289]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.673000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd35bf3090 a2=0 a3=7ffd35bf307c items=0 ppid=2197 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.673000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:07:38.675000 audit[2290]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.675000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffecb41f270 a2=0 a3=7ffecb41f25c items=0 ppid=2197 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.675000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:07:38.690000 audit[2292]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.690000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffb007e360 a2=0 a3=7fffb007e34c items=0 ppid=2197 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.690000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:07:38.702000 audit[2295]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.702000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe5961b310 a2=0 a3=7ffe5961b2fc items=0 ppid=2197 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.702000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:07:38.708000 audit[2296]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.708000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff39880020 a2=0 a3=7fff3988000c items=0 ppid=2197 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.708000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:07:38.715000 audit[2298]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:38.715000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd70eaf1e0 a2=0 a3=7ffd70eaf1cc items=0 ppid=2197 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.715000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:07:38.847000 audit[2304]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:07:38.847000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd0fea3260 a2=0 a3=7ffd0fea324c items=0 ppid=2197 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.847000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:38.891000 audit[2304]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:07:38.891000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd0fea3260 a2=0 a3=7ffd0fea324c items=0 ppid=2197 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.891000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:38.892000 audit[2309]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.892000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff17973040 a2=0 a3=7fff1797302c items=0 ppid=2197 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.892000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:07:38.903000 audit[2311]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.903000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd1fe436c0 a2=0 a3=7ffd1fe436ac items=0 ppid=2197 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.903000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:07:38.931000 audit[2314]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.931000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd4ffa93c0 a2=0 a3=7ffd4ffa93ac items=0 ppid=2197 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.931000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:07:38.941000 audit[2315]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.941000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffbf1022f0 a2=0 a3=7fffbf1022dc items=0 ppid=2197 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.941000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:07:38.958000 audit[2317]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2317 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.958000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffed251cc00 a2=0 a3=7ffed251cbec items=0 ppid=2197 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.958000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:07:38.963000 audit[2318]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.963000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc210be520 a2=0 a3=7ffc210be50c items=0 ppid=2197 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.963000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:07:38.969000 audit[2320]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2320 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.969000 audit[2320]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc38e93e60 a2=0 a3=7ffc38e93e4c items=0 ppid=2197 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.969000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:07:38.978000 audit[2323]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.978000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffde21b8480 a2=0 a3=7ffde21b846c items=0 ppid=2197 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.978000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:07:38.979000 audit[2324]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2324 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.979000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd78caa9b0 a2=0 a3=7ffd78caa99c items=0 ppid=2197 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.979000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:07:38.985000 audit[2326]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.985000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffd610d7a0 a2=0 a3=7fffd610d78c items=0 ppid=2197 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.985000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:07:38.987000 audit[2327]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.987000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff28a54660 a2=0 a3=7fff28a5464c items=0 ppid=2197 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.987000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:07:38.992000 audit[2329]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2329 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:38.992000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcb5b8c150 a2=0 a3=7ffcb5b8c13c items=0 ppid=2197 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:38.992000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:07:39.000000 audit[2332]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2332 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.000000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff49289120 a2=0 a3=7fff4928910c items=0 ppid=2197 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.000000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:07:39.006000 audit[2335]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2335 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.006000 audit[2335]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffd8dcca60 a2=0 a3=7fffd8dcca4c items=0 ppid=2197 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.006000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:07:39.007000 audit[2336]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.007000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe3c0bbb40 a2=0 a3=7ffe3c0bbb2c items=0 ppid=2197 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.007000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:07:39.010000 audit[2338]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2338 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.010000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe7a33a400 a2=0 a3=7ffe7a33a3ec items=0 ppid=2197 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.010000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:07:39.019000 audit[2341]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2341 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.019000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffdbaaf0280 a2=0 a3=7ffdbaaf026c items=0 ppid=2197 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:07:39.019000 audit[2342]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2342 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.019000 audit[2342]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc92112860 a2=0 a3=7ffc9211284c items=0 ppid=2197 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:07:39.024000 audit[2344]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.024000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc9f65d6c0 a2=0 a3=7ffc9f65d6ac items=0 ppid=2197 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.024000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:07:39.025000 audit[2345]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.025000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffe504fca0 a2=0 a3=7fffe504fc8c items=0 ppid=2197 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.025000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:07:39.033000 audit[2347]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.033000 audit[2347]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff09fa1ee0 a2=0 a3=7fff09fa1ecc items=0 ppid=2197 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.033000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:07:39.039000 audit[2350]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:39.039000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff1893fb00 a2=0 a3=7fff1893faec items=0 ppid=2197 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.039000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:07:39.067000 audit[2352]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:07:39.067000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffe04880100 a2=0 a3=7ffe048800ec items=0 ppid=2197 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.067000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:39.068000 audit[2352]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:07:39.068000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffe04880100 a2=0 a3=7ffe048800ec items=0 ppid=2197 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:39.068000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:39.554338 kubelet[2034]: E1002 19:07:39.551976 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:45.474264 env[1122]: time="2023-10-02T19:07:45.473044113Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:45.501646 env[1122]: time="2023-10-02T19:07:45.501583743Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:45.533824 env[1122]: time="2023-10-02T19:07:45.531416740Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:45.543246 env[1122]: time="2023-10-02T19:07:45.540632391Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:45.543246 env[1122]: time="2023-10-02T19:07:45.541140449Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1\"" Oct 2 19:07:45.546990 env[1122]: time="2023-10-02T19:07:45.546700877Z" level=info msg="CreateContainer within sandbox \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:07:45.596864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1625913536.mount: Deactivated successfully. Oct 2 19:07:45.664448 env[1122]: time="2023-10-02T19:07:45.663649593Z" level=info msg="CreateContainer within sandbox \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c\"" Oct 2 19:07:45.664883 env[1122]: time="2023-10-02T19:07:45.664835753Z" level=info msg="StartContainer for \"378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c\"" Oct 2 19:07:45.726605 systemd[1]: Started cri-containerd-378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c.scope. Oct 2 19:07:45.783924 kernel: kauditd_printk_skb: 300 callbacks suppressed Oct 2 19:07:45.784122 kernel: audit: type=1400 audit(1696273665.747:1054): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.784162 kernel: audit: type=1400 audit(1696273665.747:1055): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.784183 kernel: audit: type=1400 audit(1696273665.747:1056): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.810701 kernel: audit: type=1400 audit(1696273665.747:1057): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.810876 kernel: audit: type=1400 audit(1696273665.747:1058): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.829811 kernel: audit: type=1400 audit(1696273665.747:1059): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.835547 kernel: audit: type=1400 audit(1696273665.747:1060): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.835745 kernel: audit: type=1400 audit(1696273665.747:1061): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838025 kernel: audit: type=1400 audit(1696273665.747:1062): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.847538 kernel: audit: type=1400 audit(1696273665.786:1063): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.786000 audit: BPF prog-id=120 op=LOAD Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2173 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:45.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337386139383931653565386135326636313739646561353532313266 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2173 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:45.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337386139383931653565386135326636313739646561353532313266 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.796000 audit: BPF prog-id=121 op=LOAD Oct 2 19:07:45.796000 audit[2362]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000380420 items=0 ppid=2173 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:45.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337386139383931653565386135326636313739646561353532313266 Oct 2 19:07:45.821000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.821000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.821000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.821000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.821000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.821000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.821000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.821000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.821000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.821000 audit: BPF prog-id=122 op=LOAD Oct 2 19:07:45.821000 audit[2362]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000380468 items=0 ppid=2173 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:45.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337386139383931653565386135326636313739646561353532313266 Oct 2 19:07:45.837000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:07:45.837000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { perfmon } for pid=2362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit[2362]: AVC avc: denied { bpf } for pid=2362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:45.838000 audit: BPF prog-id=123 op=LOAD Oct 2 19:07:45.838000 audit[2362]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000380878 items=0 ppid=2173 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:45.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337386139383931653565386135326636313739646561353532313266 Oct 2 19:07:46.029822 env[1122]: time="2023-10-02T19:07:46.029523432Z" level=info msg="StartContainer for \"378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c\" returns successfully" Oct 2 19:07:48.474000 audit[2394]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:07:48.474000 audit[2394]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffc422b5c80 a2=0 a3=7ffc422b5c6c items=0 ppid=2197 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:48.474000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:48.479000 audit[2394]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:07:48.479000 audit[2394]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffc422b5c80 a2=0 a3=31030 items=0 ppid=2197 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:48.479000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:48.510000 audit[2396]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:07:48.510000 audit[2396]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffe3c421f60 a2=0 a3=7ffe3c421f4c items=0 ppid=2197 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:48.510000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:48.511000 audit[2396]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:07:48.511000 audit[2396]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffe3c421f60 a2=0 a3=31030 items=0 ppid=2197 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:48.511000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:49.022897 kubelet[2034]: I1002 19:07:49.022224 2034 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-8547bd6cc6-hcjdc" podStartSLOduration=5.849240387 podCreationTimestamp="2023-10-02 19:07:36 +0000 UTC" firstStartedPulling="2023-10-02 19:07:38.369529877 +0000 UTC m=+15.229564939" lastFinishedPulling="2023-10-02 19:07:45.542451511 +0000 UTC m=+22.402486583" observedRunningTime="2023-10-02 19:07:46.606985735 +0000 UTC m=+23.467020807" watchObservedRunningTime="2023-10-02 19:07:49.022162031 +0000 UTC m=+25.882197133" Oct 2 19:07:49.022897 kubelet[2034]: I1002 19:07:49.022504 2034 topology_manager.go:215] "Topology Admit Handler" podUID="59c3c28d-e37f-40f4-a153-e5a8c89d00ff" podNamespace="calico-system" podName="calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:07:49.028481 systemd[1]: Created slice kubepods-besteffort-pod59c3c28d_e37f_40f4_a153_e5a8c89d00ff.slice. Oct 2 19:07:49.035402 kubelet[2034]: W1002 19:07:49.035366 2034 reflector.go:535] object-"calico-system"/"typha-certs": failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Oct 2 19:07:49.035648 kubelet[2034]: E1002 19:07:49.035629 2034 reflector.go:147] object-"calico-system"/"typha-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Oct 2 19:07:49.168717 kubelet[2034]: I1002 19:07:49.166868 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g9nx9\" (UniqueName: \"kubernetes.io/projected/59c3c28d-e37f-40f4-a153-e5a8c89d00ff-kube-api-access-g9nx9\") pod \"calico-typha-67cdbcd9d5-tsxl7\" (UID: \"59c3c28d-e37f-40f4-a153-e5a8c89d00ff\") " pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:07:49.168717 kubelet[2034]: I1002 19:07:49.166926 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/59c3c28d-e37f-40f4-a153-e5a8c89d00ff-tigera-ca-bundle\") pod \"calico-typha-67cdbcd9d5-tsxl7\" (UID: \"59c3c28d-e37f-40f4-a153-e5a8c89d00ff\") " pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:07:49.168717 kubelet[2034]: I1002 19:07:49.166952 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/59c3c28d-e37f-40f4-a153-e5a8c89d00ff-typha-certs\") pod \"calico-typha-67cdbcd9d5-tsxl7\" (UID: \"59c3c28d-e37f-40f4-a153-e5a8c89d00ff\") " pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:07:49.188429 kubelet[2034]: I1002 19:07:49.188371 2034 topology_manager.go:215] "Topology Admit Handler" podUID="11e7d77a-00cd-4bfe-a04f-adcc5a172def" podNamespace="calico-system" podName="calico-node-46wdb" Oct 2 19:07:49.198014 systemd[1]: Created slice kubepods-besteffort-pod11e7d77a_00cd_4bfe_a04f_adcc5a172def.slice. Oct 2 19:07:49.268621 kubelet[2034]: I1002 19:07:49.267348 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/11e7d77a-00cd-4bfe-a04f-adcc5a172def-cni-net-dir\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.268621 kubelet[2034]: I1002 19:07:49.267410 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/11e7d77a-00cd-4bfe-a04f-adcc5a172def-lib-modules\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.268621 kubelet[2034]: I1002 19:07:49.267435 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/11e7d77a-00cd-4bfe-a04f-adcc5a172def-xtables-lock\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.268621 kubelet[2034]: I1002 19:07:49.267552 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/11e7d77a-00cd-4bfe-a04f-adcc5a172def-tigera-ca-bundle\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.268621 kubelet[2034]: I1002 19:07:49.267616 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/11e7d77a-00cd-4bfe-a04f-adcc5a172def-cni-log-dir\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.269089 kubelet[2034]: I1002 19:07:49.267692 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/11e7d77a-00cd-4bfe-a04f-adcc5a172def-flexvol-driver-host\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.269089 kubelet[2034]: I1002 19:07:49.267743 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/11e7d77a-00cd-4bfe-a04f-adcc5a172def-policysync\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.269089 kubelet[2034]: I1002 19:07:49.267775 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/11e7d77a-00cd-4bfe-a04f-adcc5a172def-var-lib-calico\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.269089 kubelet[2034]: I1002 19:07:49.267823 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/11e7d77a-00cd-4bfe-a04f-adcc5a172def-var-run-calico\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.269089 kubelet[2034]: I1002 19:07:49.267879 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/11e7d77a-00cd-4bfe-a04f-adcc5a172def-cni-bin-dir\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.269251 kubelet[2034]: I1002 19:07:49.267915 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9cdkb\" (UniqueName: \"kubernetes.io/projected/11e7d77a-00cd-4bfe-a04f-adcc5a172def-kube-api-access-9cdkb\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.269251 kubelet[2034]: I1002 19:07:49.267946 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/11e7d77a-00cd-4bfe-a04f-adcc5a172def-node-certs\") pod \"calico-node-46wdb\" (UID: \"11e7d77a-00cd-4bfe-a04f-adcc5a172def\") " pod="calico-system/calico-node-46wdb" Oct 2 19:07:49.378950 kubelet[2034]: E1002 19:07:49.378799 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.379136 kubelet[2034]: W1002 19:07:49.379107 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.379268 kubelet[2034]: E1002 19:07:49.379242 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.380642 kubelet[2034]: E1002 19:07:49.380480 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.380642 kubelet[2034]: W1002 19:07:49.380511 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.380642 kubelet[2034]: E1002 19:07:49.380546 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.381756 kubelet[2034]: E1002 19:07:49.381716 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.381756 kubelet[2034]: W1002 19:07:49.381744 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.381907 kubelet[2034]: E1002 19:07:49.381888 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.382624 kubelet[2034]: E1002 19:07:49.382600 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.382624 kubelet[2034]: W1002 19:07:49.382622 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.382978 kubelet[2034]: E1002 19:07:49.382800 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.383374 kubelet[2034]: E1002 19:07:49.383352 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.383374 kubelet[2034]: W1002 19:07:49.383369 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.383484 kubelet[2034]: E1002 19:07:49.383463 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.383952 kubelet[2034]: E1002 19:07:49.383755 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.383952 kubelet[2034]: W1002 19:07:49.383775 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.383952 kubelet[2034]: E1002 19:07:49.383893 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.385451 kubelet[2034]: E1002 19:07:49.385246 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.385451 kubelet[2034]: W1002 19:07:49.385259 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.385451 kubelet[2034]: E1002 19:07:49.385354 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.385909 kubelet[2034]: E1002 19:07:49.385749 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.385909 kubelet[2034]: W1002 19:07:49.385768 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.386066 kubelet[2034]: E1002 19:07:49.386048 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.386607 kubelet[2034]: E1002 19:07:49.386297 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.386607 kubelet[2034]: W1002 19:07:49.386312 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.386607 kubelet[2034]: E1002 19:07:49.386402 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.387216 kubelet[2034]: E1002 19:07:49.387017 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.387216 kubelet[2034]: W1002 19:07:49.387030 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.387216 kubelet[2034]: E1002 19:07:49.387163 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.387671 kubelet[2034]: E1002 19:07:49.387459 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.387671 kubelet[2034]: W1002 19:07:49.387472 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.387757 kubelet[2034]: E1002 19:07:49.387737 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.388001 kubelet[2034]: E1002 19:07:49.387977 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.388001 kubelet[2034]: W1002 19:07:49.387989 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.388160 kubelet[2034]: E1002 19:07:49.388107 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.388391 kubelet[2034]: E1002 19:07:49.388297 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.388391 kubelet[2034]: W1002 19:07:49.388310 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.388391 kubelet[2034]: E1002 19:07:49.388343 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.388685 kubelet[2034]: E1002 19:07:49.388660 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.388685 kubelet[2034]: W1002 19:07:49.388674 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.389083 kubelet[2034]: E1002 19:07:49.388967 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.389083 kubelet[2034]: E1002 19:07:49.388976 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.389083 kubelet[2034]: W1002 19:07:49.388983 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.389083 kubelet[2034]: E1002 19:07:49.389004 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.389428 kubelet[2034]: E1002 19:07:49.389325 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.389428 kubelet[2034]: W1002 19:07:49.389340 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.389428 kubelet[2034]: E1002 19:07:49.389397 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.389688 kubelet[2034]: E1002 19:07:49.389660 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.389688 kubelet[2034]: W1002 19:07:49.389673 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.390048 kubelet[2034]: E1002 19:07:49.389931 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.390048 kubelet[2034]: W1002 19:07:49.389948 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.390048 kubelet[2034]: E1002 19:07:49.389953 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.390048 kubelet[2034]: E1002 19:07:49.389984 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.390343 kubelet[2034]: E1002 19:07:49.390318 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.390343 kubelet[2034]: W1002 19:07:49.390331 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.390658 kubelet[2034]: E1002 19:07:49.390542 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.390658 kubelet[2034]: W1002 19:07:49.390551 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.390658 kubelet[2034]: E1002 19:07:49.390560 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.390658 kubelet[2034]: E1002 19:07:49.390590 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.390831 kubelet[2034]: E1002 19:07:49.390743 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.390831 kubelet[2034]: W1002 19:07:49.390751 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.390942 kubelet[2034]: E1002 19:07:49.390931 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.391125 kubelet[2034]: E1002 19:07:49.391110 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.391214 kubelet[2034]: W1002 19:07:49.391194 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.391469 kubelet[2034]: E1002 19:07:49.391411 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.392335 kubelet[2034]: E1002 19:07:49.392318 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.392446 kubelet[2034]: W1002 19:07:49.392426 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.392720 kubelet[2034]: E1002 19:07:49.392706 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.392820 kubelet[2034]: W1002 19:07:49.392801 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.393238 kubelet[2034]: E1002 19:07:49.393216 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.393292 kubelet[2034]: E1002 19:07:49.393264 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.393396 kubelet[2034]: E1002 19:07:49.393383 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.393480 kubelet[2034]: W1002 19:07:49.393463 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.393683 kubelet[2034]: E1002 19:07:49.393672 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.393770 kubelet[2034]: W1002 19:07:49.393753 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.397348 kubelet[2034]: E1002 19:07:49.393977 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.397348 kubelet[2034]: E1002 19:07:49.394009 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.397632 kubelet[2034]: E1002 19:07:49.397608 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.397757 kubelet[2034]: W1002 19:07:49.397733 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.398068 kubelet[2034]: E1002 19:07:49.398049 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.398334 kubelet[2034]: E1002 19:07:49.398318 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.398425 kubelet[2034]: W1002 19:07:49.398405 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.398537 kubelet[2034]: E1002 19:07:49.398520 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.398818 kubelet[2034]: E1002 19:07:49.398804 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.398946 kubelet[2034]: W1002 19:07:49.398926 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.399056 kubelet[2034]: E1002 19:07:49.399038 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.400346 kubelet[2034]: E1002 19:07:49.400330 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.400443 kubelet[2034]: W1002 19:07:49.400424 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.400546 kubelet[2034]: E1002 19:07:49.400529 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.447071 kubelet[2034]: E1002 19:07:49.436621 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.447071 kubelet[2034]: W1002 19:07:49.436647 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.447071 kubelet[2034]: E1002 19:07:49.436676 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.470189 kubelet[2034]: E1002 19:07:49.470141 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.470189 kubelet[2034]: W1002 19:07:49.470173 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.470444 kubelet[2034]: E1002 19:07:49.470206 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.500984 kubelet[2034]: E1002 19:07:49.500933 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:49.502103 env[1122]: time="2023-10-02T19:07:49.501580615Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-46wdb,Uid:11e7d77a-00cd-4bfe-a04f-adcc5a172def,Namespace:calico-system,Attempt:0,}" Oct 2 19:07:49.525000 audit[2433]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2433 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:07:49.525000 audit[2433]: SYSCALL arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7fffc9e359a0 a2=0 a3=7fffc9e3598c items=0 ppid=2197 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:49.525000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:49.526000 audit[2433]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2433 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:07:49.526000 audit[2433]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7fffc9e359a0 a2=0 a3=31030 items=0 ppid=2197 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:49.526000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:07:49.572191 kubelet[2034]: E1002 19:07:49.572140 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.572191 kubelet[2034]: W1002 19:07:49.572169 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.572191 kubelet[2034]: E1002 19:07:49.572195 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.674248 kubelet[2034]: E1002 19:07:49.674038 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.674248 kubelet[2034]: W1002 19:07:49.674056 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.674248 kubelet[2034]: E1002 19:07:49.674078 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.775127 kubelet[2034]: E1002 19:07:49.774993 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.775127 kubelet[2034]: W1002 19:07:49.775017 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.775127 kubelet[2034]: E1002 19:07:49.775050 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.814520 env[1122]: time="2023-10-02T19:07:49.811546618Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:07:49.814520 env[1122]: time="2023-10-02T19:07:49.811670887Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:07:49.814520 env[1122]: time="2023-10-02T19:07:49.811706839Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:07:49.814520 env[1122]: time="2023-10-02T19:07:49.812131221Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/49a215e000ef84e971d427e670a499ecced1ce3c6e8a2c43ef2b683344b7dae9 pid=2443 runtime=io.containerd.runc.v2 Oct 2 19:07:49.853016 systemd[1]: Started cri-containerd-49a215e000ef84e971d427e670a499ecced1ce3c6e8a2c43ef2b683344b7dae9.scope. Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.875000 audit: BPF prog-id=124 op=LOAD Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2443 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:49.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613231356530303065663834653937316434323765363730613439 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2443 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:49.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613231356530303065663834653937316434323765363730613439 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit: BPF prog-id=125 op=LOAD Oct 2 19:07:49.876000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00019b520 items=0 ppid=2443 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:49.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613231356530303065663834653937316434323765363730613439 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit: BPF prog-id=126 op=LOAD Oct 2 19:07:49.876000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00019b568 items=0 ppid=2443 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:49.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613231356530303065663834653937316434323765363730613439 Oct 2 19:07:49.876000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:07:49.876000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:49.876000 audit: BPF prog-id=127 op=LOAD Oct 2 19:07:49.876000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00019b978 items=0 ppid=2443 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:49.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439613231356530303065663834653937316434323765363730613439 Oct 2 19:07:49.885209 kubelet[2034]: E1002 19:07:49.879641 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.885209 kubelet[2034]: W1002 19:07:49.879663 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.885209 kubelet[2034]: E1002 19:07:49.879697 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:49.921419 env[1122]: time="2023-10-02T19:07:49.920065304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-46wdb,Uid:11e7d77a-00cd-4bfe-a04f-adcc5a172def,Namespace:calico-system,Attempt:0,} returns sandbox id \"49a215e000ef84e971d427e670a499ecced1ce3c6e8a2c43ef2b683344b7dae9\"" Oct 2 19:07:49.921627 kubelet[2034]: E1002 19:07:49.921131 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:49.923126 env[1122]: time="2023-10-02T19:07:49.922662317Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:07:49.981662 kubelet[2034]: E1002 19:07:49.981290 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:49.981662 kubelet[2034]: W1002 19:07:49.981323 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:49.981662 kubelet[2034]: E1002 19:07:49.981356 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.082569 kubelet[2034]: E1002 19:07:50.082526 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.082569 kubelet[2034]: W1002 19:07:50.082565 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.083150 kubelet[2034]: E1002 19:07:50.082594 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.184043 kubelet[2034]: E1002 19:07:50.183993 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.184043 kubelet[2034]: W1002 19:07:50.184016 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.184043 kubelet[2034]: E1002 19:07:50.184040 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.268733 kubelet[2034]: E1002 19:07:50.268594 2034 secret.go:194] Couldn't get secret calico-system/typha-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:07:50.268733 kubelet[2034]: E1002 19:07:50.268719 2034 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/59c3c28d-e37f-40f4-a153-e5a8c89d00ff-typha-certs podName:59c3c28d-e37f-40f4-a153-e5a8c89d00ff nodeName:}" failed. No retries permitted until 2023-10-02 19:07:50.768693019 +0000 UTC m=+27.628728101 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "typha-certs" (UniqueName: "kubernetes.io/secret/59c3c28d-e37f-40f4-a153-e5a8c89d00ff-typha-certs") pod "calico-typha-67cdbcd9d5-tsxl7" (UID: "59c3c28d-e37f-40f4-a153-e5a8c89d00ff") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:07:50.287140 kubelet[2034]: E1002 19:07:50.287104 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.287140 kubelet[2034]: W1002 19:07:50.287129 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.287360 kubelet[2034]: E1002 19:07:50.287162 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.388499 kubelet[2034]: E1002 19:07:50.388468 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.388499 kubelet[2034]: W1002 19:07:50.388491 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.388692 kubelet[2034]: E1002 19:07:50.388517 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.489257 kubelet[2034]: E1002 19:07:50.489211 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.489460 kubelet[2034]: W1002 19:07:50.489305 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.489460 kubelet[2034]: E1002 19:07:50.489336 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.590458 kubelet[2034]: E1002 19:07:50.590314 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.590458 kubelet[2034]: W1002 19:07:50.590345 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.590458 kubelet[2034]: E1002 19:07:50.590373 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.691910 kubelet[2034]: E1002 19:07:50.691861 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.691910 kubelet[2034]: W1002 19:07:50.691894 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.691910 kubelet[2034]: E1002 19:07:50.691920 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.793036 kubelet[2034]: E1002 19:07:50.792980 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.793036 kubelet[2034]: W1002 19:07:50.793007 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.793036 kubelet[2034]: E1002 19:07:50.793032 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.793450 kubelet[2034]: E1002 19:07:50.793389 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.793450 kubelet[2034]: W1002 19:07:50.793428 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.793556 kubelet[2034]: E1002 19:07:50.793464 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.793834 kubelet[2034]: E1002 19:07:50.793805 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.793834 kubelet[2034]: W1002 19:07:50.793820 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.793834 kubelet[2034]: E1002 19:07:50.793834 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.794104 kubelet[2034]: E1002 19:07:50.794078 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.794104 kubelet[2034]: W1002 19:07:50.794093 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.794104 kubelet[2034]: E1002 19:07:50.794107 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.794370 kubelet[2034]: E1002 19:07:50.794351 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.794370 kubelet[2034]: W1002 19:07:50.794364 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.794467 kubelet[2034]: E1002 19:07:50.794378 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.798591 kubelet[2034]: E1002 19:07:50.798544 2034 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:07:50.798591 kubelet[2034]: W1002 19:07:50.798577 2034 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:07:50.798591 kubelet[2034]: E1002 19:07:50.798605 2034 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:07:50.833529 kubelet[2034]: E1002 19:07:50.833484 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:50.834373 env[1122]: time="2023-10-02T19:07:50.834325999Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-67cdbcd9d5-tsxl7,Uid:59c3c28d-e37f-40f4-a153-e5a8c89d00ff,Namespace:calico-system,Attempt:0,}" Oct 2 19:07:51.816917 env[1122]: time="2023-10-02T19:07:51.816793569Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:07:51.816917 env[1122]: time="2023-10-02T19:07:51.816868279Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:07:51.816917 env[1122]: time="2023-10-02T19:07:51.816882827Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:07:51.817223 env[1122]: time="2023-10-02T19:07:51.817090783Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/30e4116abdbbc11b1ea8be13e65bccfea02df56829dab528d17b43c12ac1f0be pid=2499 runtime=io.containerd.runc.v2 Oct 2 19:07:51.834200 systemd[1]: Started cri-containerd-30e4116abdbbc11b1ea8be13e65bccfea02df56829dab528d17b43c12ac1f0be.scope. Oct 2 19:07:51.847909 kernel: kauditd_printk_skb: 122 callbacks suppressed Oct 2 19:07:51.848091 kernel: audit: type=1400 audit(1696273671.843:1096): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.848127 kernel: audit: type=1400 audit(1696273671.843:1097): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851950 kernel: audit: type=1400 audit(1696273671.843:1098): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.852017 kernel: audit: type=1400 audit(1696273671.843:1099): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.857643 kernel: audit: type=1400 audit(1696273671.843:1100): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.862290 kernel: audit: type=1400 audit(1696273671.843:1101): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.862345 kernel: audit: type=1400 audit(1696273671.843:1102): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.862366 kernel: audit: type=1400 audit(1696273671.843:1103): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.866552 kernel: audit: type=1400 audit(1696273671.843:1104): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.866633 kernel: audit: type=1400 audit(1696273671.846:1105): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.846000 audit: BPF prog-id=128 op=LOAD Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2499 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653431313661626462626331316231656138626531336536356263 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2499 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653431313661626462626331316231656138626531336536356263 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.847000 audit: BPF prog-id=129 op=LOAD Oct 2 19:07:51.847000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000905f0 items=0 ppid=2499 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653431313661626462626331316231656138626531336536356263 Oct 2 19:07:51.851000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.851000 audit: BPF prog-id=130 op=LOAD Oct 2 19:07:51.851000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000090638 items=0 ppid=2499 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653431313661626462626331316231656138626531336536356263 Oct 2 19:07:51.856000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:07:51.856000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { perfmon } for pid=2509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit[2509]: AVC avc: denied { bpf } for pid=2509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.856000 audit: BPF prog-id=131 op=LOAD Oct 2 19:07:51.856000 audit[2509]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000090a48 items=0 ppid=2499 pid=2509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653431313661626462626331316231656138626531336536356263 Oct 2 19:07:51.893257 env[1122]: time="2023-10-02T19:07:51.893203415Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-67cdbcd9d5-tsxl7,Uid:59c3c28d-e37f-40f4-a153-e5a8c89d00ff,Namespace:calico-system,Attempt:0,} returns sandbox id \"30e4116abdbbc11b1ea8be13e65bccfea02df56829dab528d17b43c12ac1f0be\"" Oct 2 19:07:51.893899 kubelet[2034]: E1002 19:07:51.893874 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:55.139213 env[1122]: time="2023-10-02T19:07:55.139131492Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:55.145821 env[1122]: time="2023-10-02T19:07:55.145718974Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:55.152028 env[1122]: time="2023-10-02T19:07:55.151964577Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:55.154497 env[1122]: time="2023-10-02T19:07:55.154423505Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:55.155871 env[1122]: time="2023-10-02T19:07:55.155795322Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72\"" Oct 2 19:07:55.157772 env[1122]: time="2023-10-02T19:07:55.157681310Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 19:07:55.158594 env[1122]: time="2023-10-02T19:07:55.158550648Z" level=info msg="CreateContainer within sandbox \"49a215e000ef84e971d427e670a499ecced1ce3c6e8a2c43ef2b683344b7dae9\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:07:55.189780 env[1122]: time="2023-10-02T19:07:55.189548818Z" level=info msg="CreateContainer within sandbox \"49a215e000ef84e971d427e670a499ecced1ce3c6e8a2c43ef2b683344b7dae9\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"972a1d5a94de591bbe4908e6bdd93f057a356fa3a5a416d30c3fc7a8f7bff46b\"" Oct 2 19:07:55.190266 env[1122]: time="2023-10-02T19:07:55.190227909Z" level=info msg="StartContainer for \"972a1d5a94de591bbe4908e6bdd93f057a356fa3a5a416d30c3fc7a8f7bff46b\"" Oct 2 19:07:55.211235 systemd[1]: Started cri-containerd-972a1d5a94de591bbe4908e6bdd93f057a356fa3a5a416d30c3fc7a8f7bff46b.scope. Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2443 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:55.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937326131643561393464653539316262653439303865366264643933 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.223000 audit: BPF prog-id=132 op=LOAD Oct 2 19:07:55.223000 audit[2540]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003d4100 items=0 ppid=2443 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:55.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937326131643561393464653539316262653439303865366264643933 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit: BPF prog-id=133 op=LOAD Oct 2 19:07:55.224000 audit[2540]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003d4148 items=0 ppid=2443 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:55.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937326131643561393464653539316262653439303865366264643933 Oct 2 19:07:55.224000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:07:55.224000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { perfmon } for pid=2540 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit[2540]: AVC avc: denied { bpf } for pid=2540 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:55.224000 audit: BPF prog-id=134 op=LOAD Oct 2 19:07:55.224000 audit[2540]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003d41d8 items=0 ppid=2443 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:55.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937326131643561393464653539316262653439303865366264643933 Oct 2 19:07:55.243211 env[1122]: time="2023-10-02T19:07:55.243159944Z" level=info msg="StartContainer for \"972a1d5a94de591bbe4908e6bdd93f057a356fa3a5a416d30c3fc7a8f7bff46b\" returns successfully" Oct 2 19:07:55.252197 systemd[1]: cri-containerd-972a1d5a94de591bbe4908e6bdd93f057a356fa3a5a416d30c3fc7a8f7bff46b.scope: Deactivated successfully. Oct 2 19:07:55.253000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:07:55.274404 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-972a1d5a94de591bbe4908e6bdd93f057a356fa3a5a416d30c3fc7a8f7bff46b-rootfs.mount: Deactivated successfully. Oct 2 19:07:55.359417 env[1122]: time="2023-10-02T19:07:55.359347122Z" level=info msg="shim disconnected" id=972a1d5a94de591bbe4908e6bdd93f057a356fa3a5a416d30c3fc7a8f7bff46b Oct 2 19:07:55.359417 env[1122]: time="2023-10-02T19:07:55.359414787Z" level=warning msg="cleaning up after shim disconnected" id=972a1d5a94de591bbe4908e6bdd93f057a356fa3a5a416d30c3fc7a8f7bff46b namespace=k8s.io Oct 2 19:07:55.359417 env[1122]: time="2023-10-02T19:07:55.359429276Z" level=info msg="cleaning up dead shim" Oct 2 19:07:55.366871 env[1122]: time="2023-10-02T19:07:55.366782080Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2579 runtime=io.containerd.runc.v2\n" Oct 2 19:07:55.619576 kubelet[2034]: E1002 19:07:55.619526 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:56.540741 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2892909327.mount: Deactivated successfully. Oct 2 19:07:58.573621 env[1122]: time="2023-10-02T19:07:58.573556591Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:58.616071 env[1122]: time="2023-10-02T19:07:58.615999214Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:58.657900 env[1122]: time="2023-10-02T19:07:58.657770739Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:58.693200 env[1122]: time="2023-10-02T19:07:58.693125987Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:58.693889 env[1122]: time="2023-10-02T19:07:58.693833587Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f\"" Oct 2 19:07:58.694839 env[1122]: time="2023-10-02T19:07:58.694794850Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:07:58.696169 env[1122]: time="2023-10-02T19:07:58.696141264Z" level=info msg="CreateContainer within sandbox \"30e4116abdbbc11b1ea8be13e65bccfea02df56829dab528d17b43c12ac1f0be\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 19:07:59.137662 env[1122]: time="2023-10-02T19:07:59.137599898Z" level=info msg="CreateContainer within sandbox \"30e4116abdbbc11b1ea8be13e65bccfea02df56829dab528d17b43c12ac1f0be\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"21a5c6404f733c2d63557a36a81b998dfcaf9717cd55a658ee9206457ad625fc\"" Oct 2 19:07:59.138267 env[1122]: time="2023-10-02T19:07:59.138245204Z" level=info msg="StartContainer for \"21a5c6404f733c2d63557a36a81b998dfcaf9717cd55a658ee9206457ad625fc\"" Oct 2 19:07:59.155067 systemd[1]: Started cri-containerd-21a5c6404f733c2d63557a36a81b998dfcaf9717cd55a658ee9206457ad625fc.scope. Oct 2 19:07:59.174909 kernel: kauditd_printk_skb: 91 callbacks suppressed Oct 2 19:07:59.175095 kernel: audit: type=1400 audit(1696273679.170:1121): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.175144 kernel: audit: type=1400 audit(1696273679.170:1122): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.181332 kernel: audit: type=1400 audit(1696273679.170:1123): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.181451 kernel: audit: type=1400 audit(1696273679.170:1124): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.181481 kernel: audit: type=1400 audit(1696273679.170:1125): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.183669 kernel: audit: type=1400 audit(1696273679.170:1126): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.185956 kernel: audit: type=1400 audit(1696273679.170:1127): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.186177 kernel: audit: type=1400 audit(1696273679.170:1128): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.190360 kernel: audit: type=1400 audit(1696273679.170:1129): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.190426 kernel: audit: type=1400 audit(1696273679.172:1130): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.172000 audit: BPF prog-id=135 op=LOAD Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2499 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231613563363430346637333363326436333535376133366138316239 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2499 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231613563363430346637333363326436333535376133366138316239 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.173000 audit: BPF prog-id=136 op=LOAD Oct 2 19:07:59.173000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003cc120 items=0 ppid=2499 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231613563363430346637333363326436333535376133366138316239 Oct 2 19:07:59.174000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.174000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.174000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.174000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.174000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.174000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.174000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.174000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.174000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.174000 audit: BPF prog-id=137 op=LOAD Oct 2 19:07:59.174000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003cc168 items=0 ppid=2499 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231613563363430346637333363326436333535376133366138316239 Oct 2 19:07:59.176000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:07:59.176000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.176000 audit: BPF prog-id=138 op=LOAD Oct 2 19:07:59.176000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003cc578 items=0 ppid=2499 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231613563363430346637333363326436333535376133366138316239 Oct 2 19:07:59.405174 env[1122]: time="2023-10-02T19:07:59.405053567Z" level=info msg="StartContainer for \"21a5c6404f733c2d63557a36a81b998dfcaf9717cd55a658ee9206457ad625fc\" returns successfully" Oct 2 19:07:59.628222 kubelet[2034]: E1002 19:07:59.628184 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:59.638677 kubelet[2034]: I1002 19:07:59.638615 2034 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" podStartSLOduration=4.839162916 podCreationTimestamp="2023-10-02 19:07:48 +0000 UTC" firstStartedPulling="2023-10-02 19:07:51.89473578 +0000 UTC m=+28.754770852" lastFinishedPulling="2023-10-02 19:07:58.694140965 +0000 UTC m=+35.554176038" observedRunningTime="2023-10-02 19:07:59.638015701 +0000 UTC m=+36.498050783" watchObservedRunningTime="2023-10-02 19:07:59.638568102 +0000 UTC m=+36.498603194" Oct 2 19:08:00.630113 kubelet[2034]: E1002 19:08:00.630079 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:01.051836 systemd[1]: Started sshd@7-10.0.0.35:22-10.0.0.1:51234.service. Oct 2 19:08:01.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.35:22-10.0.0.1:51234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:01.076000 audit[2639]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:01.076000 audit[2639]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffefcc54660 a2=0 a3=7ffefcc5464c items=0 ppid=2197 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:01.076000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:01.078000 audit[2639]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:01.078000 audit[2639]: SYSCALL arch=c000003e syscall=46 success=yes exit=6068 a0=3 a1=7ffefcc54660 a2=0 a3=7ffefcc5464c items=0 ppid=2197 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:01.078000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:01.101000 audit[2636]: USER_ACCT pid=2636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:01.102901 sshd[2636]: Accepted publickey for core from 10.0.0.1 port 51234 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:08:01.103000 audit[2636]: CRED_ACQ pid=2636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:01.103000 audit[2636]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6c06fb50 a2=3 a3=0 items=0 ppid=1 pid=2636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:01.103000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:01.105083 sshd[2636]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:08:01.109664 systemd-logind[1110]: New session 8 of user core. Oct 2 19:08:01.110674 systemd[1]: Started session-8.scope. Oct 2 19:08:01.116000 audit[2636]: USER_START pid=2636 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:01.118000 audit[2640]: CRED_ACQ pid=2640 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:01.352593 sshd[2636]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:01.352000 audit[2636]: USER_END pid=2636 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:01.353000 audit[2636]: CRED_DISP pid=2636 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:01.355186 systemd[1]: sshd@7-10.0.0.35:22-10.0.0.1:51234.service: Deactivated successfully. Oct 2 19:08:01.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.35:22-10.0.0.1:51234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:01.356099 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:08:01.356744 systemd-logind[1110]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:08:01.357483 systemd-logind[1110]: Removed session 8. Oct 2 19:08:01.632267 kubelet[2034]: E1002 19:08:01.632160 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:01.693942 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount588625211.mount: Deactivated successfully. Oct 2 19:08:02.633971 kubelet[2034]: E1002 19:08:02.633926 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:03.682063 kubelet[2034]: I1002 19:08:03.682031 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:03.682063 kubelet[2034]: I1002 19:08:03.682065 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:08:04.157278 kubelet[2034]: I1002 19:08:04.157160 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:08:04.159664 kubelet[2034]: I1002 19:08:04.159586 2034 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" size=301773 Oct 2 19:08:04.160038 env[1122]: time="2023-10-02T19:08:04.159979861Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\"" Oct 2 19:08:04.218475 env[1122]: time="2023-10-02T19:08:04.218405385Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:08:04.285638 env[1122]: time="2023-10-02T19:08:04.285570665Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:08:04.310494 env[1122]: time="2023-10-02T19:08:04.310427326Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,XXX_unrecognized:[],}" Oct 2 19:08:04.346734 env[1122]: time="2023-10-02T19:08:04.346670871Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\" returns successfully" Oct 2 19:08:04.347071 kubelet[2034]: I1002 19:08:04.347028 2034 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9" size=102894559 Oct 2 19:08:04.347295 env[1122]: time="2023-10-02T19:08:04.347273876Z" level=info msg="RemoveImage \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Oct 2 19:08:04.415257 env[1122]: time="2023-10-02T19:08:04.415162777Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.9-0,XXX_unrecognized:[],}" Oct 2 19:08:04.467231 env[1122]: time="2023-10-02T19:08:04.467182218Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,XXX_unrecognized:[],}" Oct 2 19:08:04.526256 env[1122]: time="2023-10-02T19:08:04.526196308Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,XXX_unrecognized:[],}" Oct 2 19:08:04.805718 env[1122]: time="2023-10-02T19:08:04.805603182Z" level=info msg="RemoveImage \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\" returns successfully" Oct 2 19:08:04.806007 kubelet[2034]: I1002 19:08:04.805984 2034 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc" size=16190758 Oct 2 19:08:04.806281 env[1122]: time="2023-10-02T19:08:04.806214722Z" level=info msg="RemoveImage \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:08:04.835141 env[1122]: time="2023-10-02T19:08:04.835103063Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.10.1,XXX_unrecognized:[],}" Oct 2 19:08:04.882286 env[1122]: time="2023-10-02T19:08:04.882222901Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,XXX_unrecognized:[],}" Oct 2 19:08:04.951390 env[1122]: time="2023-10-02T19:08:04.951340054Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,XXX_unrecognized:[],}" Oct 2 19:08:05.192188 env[1122]: time="2023-10-02T19:08:05.192123666Z" level=info msg="RemoveImage \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\" returns successfully" Oct 2 19:08:05.201891 kubelet[2034]: I1002 19:08:05.201866 2034 eviction_manager.go:349] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:08:07.084353 env[1122]: time="2023-10-02T19:08:07.084275045Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:07.089008 env[1122]: time="2023-10-02T19:08:07.088953464Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:07.093127 env[1122]: time="2023-10-02T19:08:07.093068019Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:07.095321 env[1122]: time="2023-10-02T19:08:07.095264068Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:07.095907 env[1122]: time="2023-10-02T19:08:07.095879623Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7\"" Oct 2 19:08:07.098031 env[1122]: time="2023-10-02T19:08:07.097975647Z" level=info msg="CreateContainer within sandbox \"49a215e000ef84e971d427e670a499ecced1ce3c6e8a2c43ef2b683344b7dae9\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:08:07.252539 env[1122]: time="2023-10-02T19:08:07.252449604Z" level=info msg="CreateContainer within sandbox \"49a215e000ef84e971d427e670a499ecced1ce3c6e8a2c43ef2b683344b7dae9\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"ce17179df703150f27eb0043babb1a35ceee515c7058feb2ff736d9d95b1e0ea\"" Oct 2 19:08:07.253434 env[1122]: time="2023-10-02T19:08:07.253385375Z" level=info msg="StartContainer for \"ce17179df703150f27eb0043babb1a35ceee515c7058feb2ff736d9d95b1e0ea\"" Oct 2 19:08:07.276295 systemd[1]: run-containerd-runc-k8s.io-ce17179df703150f27eb0043babb1a35ceee515c7058feb2ff736d9d95b1e0ea-runc.y6aBqz.mount: Deactivated successfully. Oct 2 19:08:07.278785 systemd[1]: Started cri-containerd-ce17179df703150f27eb0043babb1a35ceee515c7058feb2ff736d9d95b1e0ea.scope. Oct 2 19:08:07.304892 kernel: kauditd_printk_skb: 64 callbacks suppressed Oct 2 19:08:07.305071 kernel: audit: type=1400 audit(1696273687.294:1150): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.305100 kernel: audit: type=1300 audit(1696273687.294:1150): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2443 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:07.305124 kernel: audit: type=1327 audit(1696273687.294:1150): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313731373964663730333135306632376562303034336261626231 Oct 2 19:08:07.305148 kernel: audit: type=1400 audit(1696273687.294:1151): avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2443 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:07.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313731373964663730333135306632376562303034336261626231 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.308752 kernel: audit: type=1400 audit(1696273687.294:1151): avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.308818 kernel: audit: type=1400 audit(1696273687.294:1151): avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.312540 kernel: audit: type=1400 audit(1696273687.294:1151): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.317380 kernel: audit: type=1400 audit(1696273687.294:1151): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.319800 kernel: audit: type=1400 audit(1696273687.294:1151): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.294000 audit: BPF prog-id=139 op=LOAD Oct 2 19:08:07.294000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c00017d8b0 items=0 ppid=2443 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:07.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313731373964663730333135306632376562303034336261626231 Oct 2 19:08:07.297000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.297000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.297000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.322901 kernel: audit: type=1400 audit(1696273687.294:1151): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.297000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.297000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.297000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.297000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.297000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.297000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.297000 audit: BPF prog-id=140 op=LOAD Oct 2 19:08:07.297000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c00017d8f8 items=0 ppid=2443 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:07.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313731373964663730333135306632376562303034336261626231 Oct 2 19:08:07.300000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:08:07.300000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.300000 audit: BPF prog-id=141 op=LOAD Oct 2 19:08:07.300000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c00017d988 items=0 ppid=2443 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:07.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313731373964663730333135306632376562303034336261626231 Oct 2 19:08:07.328057 env[1122]: time="2023-10-02T19:08:07.328018001Z" level=info msg="StartContainer for \"ce17179df703150f27eb0043babb1a35ceee515c7058feb2ff736d9d95b1e0ea\" returns successfully" Oct 2 19:08:07.644004 kubelet[2034]: E1002 19:08:07.643959 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:08.645478 kubelet[2034]: E1002 19:08:08.645453 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:09.347564 env[1122]: time="2023-10-02T19:08:09.347471887Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:08:09.350254 systemd[1]: cri-containerd-ce17179df703150f27eb0043babb1a35ceee515c7058feb2ff736d9d95b1e0ea.scope: Deactivated successfully. Oct 2 19:08:09.353000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:08:09.357333 kubelet[2034]: I1002 19:08:09.357284 2034 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 19:08:09.376163 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ce17179df703150f27eb0043babb1a35ceee515c7058feb2ff736d9d95b1e0ea-rootfs.mount: Deactivated successfully. Oct 2 19:08:09.386642 kubelet[2034]: I1002 19:08:09.385745 2034 topology_manager.go:215] "Topology Admit Handler" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" podNamespace="calico-system" podName="csi-node-driver-j28n9" Oct 2 19:08:09.402228 systemd[1]: Created slice kubepods-besteffort-pod6227d699_f00d_44ab_8bb0_9c81a862cbbf.slice. Oct 2 19:08:09.426595 kubelet[2034]: I1002 19:08:09.426461 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/6227d699-f00d-44ab-8bb0-9c81a862cbbf-varrun\") pod \"csi-node-driver-j28n9\" (UID: \"6227d699-f00d-44ab-8bb0-9c81a862cbbf\") " pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:09.426892 kubelet[2034]: I1002 19:08:09.426616 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ctgt8\" (UniqueName: \"kubernetes.io/projected/6227d699-f00d-44ab-8bb0-9c81a862cbbf-kube-api-access-ctgt8\") pod \"csi-node-driver-j28n9\" (UID: \"6227d699-f00d-44ab-8bb0-9c81a862cbbf\") " pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:09.426892 kubelet[2034]: I1002 19:08:09.426658 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/6227d699-f00d-44ab-8bb0-9c81a862cbbf-registration-dir\") pod \"csi-node-driver-j28n9\" (UID: \"6227d699-f00d-44ab-8bb0-9c81a862cbbf\") " pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:09.426892 kubelet[2034]: I1002 19:08:09.426698 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/6227d699-f00d-44ab-8bb0-9c81a862cbbf-etccalico\") pod \"csi-node-driver-j28n9\" (UID: \"6227d699-f00d-44ab-8bb0-9c81a862cbbf\") " pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:09.426892 kubelet[2034]: I1002 19:08:09.426729 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/6227d699-f00d-44ab-8bb0-9c81a862cbbf-socket-dir\") pod \"csi-node-driver-j28n9\" (UID: \"6227d699-f00d-44ab-8bb0-9c81a862cbbf\") " pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:09.426892 kubelet[2034]: I1002 19:08:09.426755 2034 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/6227d699-f00d-44ab-8bb0-9c81a862cbbf-kubelet-dir\") pod \"csi-node-driver-j28n9\" (UID: \"6227d699-f00d-44ab-8bb0-9c81a862cbbf\") " pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:09.707839 env[1122]: time="2023-10-02T19:08:09.707803905Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-j28n9,Uid:6227d699-f00d-44ab-8bb0-9c81a862cbbf,Namespace:calico-system,Attempt:0,}" Oct 2 19:08:09.765408 env[1122]: time="2023-10-02T19:08:09.765350223Z" level=info msg="shim disconnected" id=ce17179df703150f27eb0043babb1a35ceee515c7058feb2ff736d9d95b1e0ea Oct 2 19:08:09.765565 env[1122]: time="2023-10-02T19:08:09.765411192Z" level=warning msg="cleaning up after shim disconnected" id=ce17179df703150f27eb0043babb1a35ceee515c7058feb2ff736d9d95b1e0ea namespace=k8s.io Oct 2 19:08:09.765565 env[1122]: time="2023-10-02T19:08:09.765430910Z" level=info msg="cleaning up dead shim" Oct 2 19:08:09.772240 env[1122]: time="2023-10-02T19:08:09.772194845Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:08:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2712 runtime=io.containerd.runc.v2\n" Oct 2 19:08:10.216481 env[1122]: time="2023-10-02T19:08:10.216405730Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:10.219208 env[1122]: time="2023-10-02T19:08:10.219172440Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:10.221154 env[1122]: time="2023-10-02T19:08:10.221118979Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:10.223127 env[1122]: time="2023-10-02T19:08:10.223085677Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:10.284449 env[1122]: time="2023-10-02T19:08:10.284351216Z" level=error msg="Failed to destroy network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:08:10.284844 env[1122]: time="2023-10-02T19:08:10.284808699Z" level=error msg="encountered an error cleaning up failed sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:08:10.284941 env[1122]: time="2023-10-02T19:08:10.284895527Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-j28n9,Uid:6227d699-f00d-44ab-8bb0-9c81a862cbbf,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:08:10.285259 kubelet[2034]: E1002 19:08:10.285213 2034 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:08:10.285645 kubelet[2034]: E1002 19:08:10.285275 2034 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:10.285645 kubelet[2034]: E1002 19:08:10.285295 2034 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:10.285645 kubelet[2034]: E1002 19:08:10.285351 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:08:10.286489 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd-shm.mount: Deactivated successfully. Oct 2 19:08:10.651198 kubelet[2034]: E1002 19:08:10.650964 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:10.652196 env[1122]: time="2023-10-02T19:08:10.652154915Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:08:10.652521 kubelet[2034]: I1002 19:08:10.652296 2034 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:10.652910 env[1122]: time="2023-10-02T19:08:10.652862726Z" level=info msg="StopPodSandbox for \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\"" Oct 2 19:08:10.675596 env[1122]: time="2023-10-02T19:08:10.675515610Z" level=error msg="StopPodSandbox for \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\" failed" error="failed to destroy network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:08:10.675801 kubelet[2034]: E1002 19:08:10.675782 2034 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:10.675905 kubelet[2034]: E1002 19:08:10.675833 2034 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd"} Oct 2 19:08:10.675905 kubelet[2034]: E1002 19:08:10.675877 2034 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6227d699-f00d-44ab-8bb0-9c81a862cbbf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:08:10.675905 kubelet[2034]: E1002 19:08:10.675901 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6227d699-f00d-44ab-8bb0-9c81a862cbbf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:08:11.360245 systemd[1]: Started sshd@8-10.0.0.35:22-10.0.0.1:35340.service. Oct 2 19:08:11.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.35:22-10.0.0.1:35340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:11.450496 sshd[2783]: Accepted publickey for core from 10.0.0.1 port 35340 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:08:11.449000 audit[2783]: USER_ACCT pid=2783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:11.456000 audit[2783]: CRED_ACQ pid=2783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:11.456000 audit[2783]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9a4cb690 a2=3 a3=0 items=0 ppid=1 pid=2783 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:11.456000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:11.464690 sshd[2783]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:08:11.493487 systemd-logind[1110]: New session 9 of user core. Oct 2 19:08:11.497374 systemd[1]: Started session-9.scope. Oct 2 19:08:11.509000 audit[2783]: USER_START pid=2783 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:11.511000 audit[2785]: CRED_ACQ pid=2785 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:11.815046 sshd[2783]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:11.815000 audit[2783]: USER_END pid=2783 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:11.815000 audit[2783]: CRED_DISP pid=2783 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:11.820185 systemd[1]: sshd@8-10.0.0.35:22-10.0.0.1:35340.service: Deactivated successfully. Oct 2 19:08:11.821281 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:08:11.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.35:22-10.0.0.1:35340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:11.825594 systemd-logind[1110]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:08:11.840589 systemd-logind[1110]: Removed session 9. Oct 2 19:08:14.394000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:14.400663 kernel: kauditd_printk_skb: 45 callbacks suppressed Oct 2 19:08:14.400933 kernel: audit: type=1400 audit(1696273694.394:1166): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:14.400982 kernel: audit: type=1300 audit(1696273694.394:1166): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00007b080 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:08:14.394000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00007b080 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:08:14.441809 kernel: audit: type=1327 audit(1696273694.394:1166): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:14.394000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:14.445765 kernel: audit: type=1400 audit(1696273694.395:1167): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:14.395000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:14.449637 kernel: audit: type=1300 audit(1696273694.395:1167): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b48d40 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:08:14.395000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b48d40 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:08:14.454594 kernel: audit: type=1327 audit(1696273694.395:1167): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:14.395000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:15.228657 kubelet[2034]: I1002 19:08:15.227162 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:15.228657 kubelet[2034]: I1002 19:08:15.227205 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:08:15.234681 kubelet[2034]: I1002 19:08:15.233039 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:08:15.272667 kubelet[2034]: I1002 19:08:15.271793 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:15.272667 kubelet[2034]: I1002 19:08:15.271941 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/calico-node-46wdb","calico-system/csi-node-driver-j28n9","tigera-operator/tigera-operator-8547bd6cc6-hcjdc","calico-system/calico-typha-67cdbcd9d5-tsxl7","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:08:15.272667 kubelet[2034]: E1002 19:08:15.271987 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:08:15.272667 kubelet[2034]: E1002 19:08:15.271998 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:15.276716 env[1122]: time="2023-10-02T19:08:15.276356548Z" level=info msg="StopContainer for \"378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c\" with timeout 30 (s)" Oct 2 19:08:15.278002 env[1122]: time="2023-10-02T19:08:15.277819923Z" level=info msg="Stop container \"378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c\" with signal terminated" Oct 2 19:08:15.319232 systemd[1]: cri-containerd-378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c.scope: Deactivated successfully. Oct 2 19:08:15.319588 systemd[1]: cri-containerd-378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c.scope: Consumed 1.135s CPU time. Oct 2 19:08:15.328929 kernel: audit: type=1334 audit(1696273695.317:1168): prog-id=120 op=UNLOAD Oct 2 19:08:15.317000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:08:15.333000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:08:15.338385 kernel: audit: type=1334 audit(1696273695.333:1169): prog-id=123 op=UNLOAD Oct 2 19:08:15.371171 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c-rootfs.mount: Deactivated successfully. Oct 2 19:08:15.835530 env[1122]: time="2023-10-02T19:08:15.834076841Z" level=info msg="shim disconnected" id=378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c Oct 2 19:08:15.835530 env[1122]: time="2023-10-02T19:08:15.834152518Z" level=warning msg="cleaning up after shim disconnected" id=378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c namespace=k8s.io Oct 2 19:08:15.835530 env[1122]: time="2023-10-02T19:08:15.834167948Z" level=info msg="cleaning up dead shim" Oct 2 19:08:15.860662 env[1122]: time="2023-10-02T19:08:15.860066804Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:08:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2814 runtime=io.containerd.runc.v2\n" Oct 2 19:08:16.160346 env[1122]: time="2023-10-02T19:08:16.155301967Z" level=info msg="StopContainer for \"378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c\" returns successfully" Oct 2 19:08:16.160346 env[1122]: time="2023-10-02T19:08:16.155976968Z" level=info msg="StopPodSandbox for \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\"" Oct 2 19:08:16.160346 env[1122]: time="2023-10-02T19:08:16.156035141Z" level=info msg="Container to stop \"378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:08:16.177208 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6-shm.mount: Deactivated successfully. Oct 2 19:08:16.205000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:08:16.205922 systemd[1]: cri-containerd-08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6.scope: Deactivated successfully. Oct 2 19:08:16.209011 kernel: audit: type=1334 audit(1696273696.205:1170): prog-id=115 op=UNLOAD Oct 2 19:08:16.223000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:08:16.232656 kernel: audit: type=1334 audit(1696273696.223:1171): prog-id=119 op=UNLOAD Oct 2 19:08:16.265410 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6-rootfs.mount: Deactivated successfully. Oct 2 19:08:16.447000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:16.447000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5f a1=c004b87cb0 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:08:16.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:08:16.447000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:16.447000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=63 a1=c004cfe150 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:08:16.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:08:16.447000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:16.447000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c008a2c360 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:08:16.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:08:16.474000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:16.474000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5d a1=c00c2c6420 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:08:16.474000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:08:16.626000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:16.626000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5d a1=c004b87d40 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:08:16.626000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:08:16.632000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:16.632000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5d a1=c004b43320 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:08:16.632000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:08:16.703544 kubelet[2034]: I1002 19:08:16.703368 2034 scope.go:117] "RemoveContainer" containerID="378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c" Oct 2 19:08:16.705605 env[1122]: time="2023-10-02T19:08:16.705518448Z" level=info msg="RemoveContainer for \"378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c\"" Oct 2 19:08:16.761919 env[1122]: time="2023-10-02T19:08:16.758775133Z" level=info msg="shim disconnected" id=08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6 Oct 2 19:08:16.761919 env[1122]: time="2023-10-02T19:08:16.758835259Z" level=warning msg="cleaning up after shim disconnected" id=08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6 namespace=k8s.io Oct 2 19:08:16.761919 env[1122]: time="2023-10-02T19:08:16.758846942Z" level=info msg="cleaning up dead shim" Oct 2 19:08:16.810964 env[1122]: time="2023-10-02T19:08:16.806954269Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:08:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2846 runtime=io.containerd.runc.v2\n" Oct 2 19:08:16.810964 env[1122]: time="2023-10-02T19:08:16.807504688Z" level=info msg="TearDown network for sandbox \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\" successfully" Oct 2 19:08:16.810964 env[1122]: time="2023-10-02T19:08:16.807537532Z" level=info msg="StopPodSandbox for \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\" returns successfully" Oct 2 19:08:16.829917 kubelet[2034]: I1002 19:08:16.829688 2034 eviction_manager.go:592] "Eviction manager: pod is evicted successfully" pod="tigera-operator/tigera-operator-8547bd6cc6-hcjdc" Oct 2 19:08:16.829917 kubelet[2034]: I1002 19:08:16.829732 2034 eviction_manager.go:201] "Eviction manager: pods evicted, waiting for pod to be cleaned up" pods=["tigera-operator/tigera-operator-8547bd6cc6-hcjdc"] Oct 2 19:08:16.862279 env[1122]: time="2023-10-02T19:08:16.862197482Z" level=info msg="RemoveContainer for \"378a9891e5e8a52f6179dea55212fe6a90fdd5c8015b60c54da5d3c95faa745c\" returns successfully" Oct 2 19:08:16.943759 kubelet[2034]: I1002 19:08:16.943678 2034 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-ztj7h\" (UniqueName: \"kubernetes.io/projected/6c267da0-605d-4949-9510-f43d1a96f65e-kube-api-access-ztj7h\") pod \"6c267da0-605d-4949-9510-f43d1a96f65e\" (UID: \"6c267da0-605d-4949-9510-f43d1a96f65e\") " Oct 2 19:08:16.943759 kubelet[2034]: I1002 19:08:16.943746 2034 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6c267da0-605d-4949-9510-f43d1a96f65e-var-lib-calico\") pod \"6c267da0-605d-4949-9510-f43d1a96f65e\" (UID: \"6c267da0-605d-4949-9510-f43d1a96f65e\") " Oct 2 19:08:16.944082 kubelet[2034]: I1002 19:08:16.943877 2034 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6c267da0-605d-4949-9510-f43d1a96f65e-var-lib-calico" (OuterVolumeSpecName: "var-lib-calico") pod "6c267da0-605d-4949-9510-f43d1a96f65e" (UID: "6c267da0-605d-4949-9510-f43d1a96f65e"). InnerVolumeSpecName "var-lib-calico". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:08:16.965814 systemd[1]: var-lib-kubelet-pods-6c267da0\x2d605d\x2d4949\x2d9510\x2df43d1a96f65e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dztj7h.mount: Deactivated successfully. Oct 2 19:08:16.966890 kubelet[2034]: I1002 19:08:16.966733 2034 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6c267da0-605d-4949-9510-f43d1a96f65e-kube-api-access-ztj7h" (OuterVolumeSpecName: "kube-api-access-ztj7h") pod "6c267da0-605d-4949-9510-f43d1a96f65e" (UID: "6c267da0-605d-4949-9510-f43d1a96f65e"). InnerVolumeSpecName "kube-api-access-ztj7h". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:08:17.048430 kubelet[2034]: I1002 19:08:17.048235 2034 reconciler_common.go:300] "Volume detached for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6c267da0-605d-4949-9510-f43d1a96f65e-var-lib-calico\") on node \"localhost\" DevicePath \"\"" Oct 2 19:08:17.048430 kubelet[2034]: I1002 19:08:17.048345 2034 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-ztj7h\" (UniqueName: \"kubernetes.io/projected/6c267da0-605d-4949-9510-f43d1a96f65e-kube-api-access-ztj7h\") on node \"localhost\" DevicePath \"\"" Oct 2 19:08:17.411557 systemd[1]: Removed slice kubepods-besteffort-pod6c267da0_605d_4949_9510_f43d1a96f65e.slice. Oct 2 19:08:17.411650 systemd[1]: kubepods-besteffort-pod6c267da0_605d_4949_9510_f43d1a96f65e.slice: Consumed 1.165s CPU time. Oct 2 19:08:17.834982 kubelet[2034]: I1002 19:08:17.830566 2034 eviction_manager.go:423] "Eviction manager: pods successfully cleaned up" pods=["tigera-operator/tigera-operator-8547bd6cc6-hcjdc"] Oct 2 19:08:17.880869 kubelet[2034]: I1002 19:08:17.877519 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:17.880869 kubelet[2034]: I1002 19:08:17.877568 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:08:17.881450 env[1122]: time="2023-10-02T19:08:17.881407313Z" level=info msg="StopPodSandbox for \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\"" Oct 2 19:08:17.881949 env[1122]: time="2023-10-02T19:08:17.881892055Z" level=info msg="TearDown network for sandbox \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\" successfully" Oct 2 19:08:17.882054 env[1122]: time="2023-10-02T19:08:17.882026665Z" level=info msg="StopPodSandbox for \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\" returns successfully" Oct 2 19:08:17.882527 env[1122]: time="2023-10-02T19:08:17.882499994Z" level=info msg="RemovePodSandbox for \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\"" Oct 2 19:08:17.882648 env[1122]: time="2023-10-02T19:08:17.882605438Z" level=info msg="Forcibly stopping sandbox \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\"" Oct 2 19:08:17.882803 env[1122]: time="2023-10-02T19:08:17.882775608Z" level=info msg="TearDown network for sandbox \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\" successfully" Oct 2 19:08:17.925201 env[1122]: time="2023-10-02T19:08:17.925118139Z" level=info msg="RemovePodSandbox \"08f7ba0789592edb6a55293415bef04cdde273cea19688121dea379284cf69c6\" returns successfully" Oct 2 19:08:17.926492 kubelet[2034]: I1002 19:08:17.926303 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:08:17.960542 kubelet[2034]: I1002 19:08:17.959936 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:17.960542 kubelet[2034]: I1002 19:08:17.960113 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/calico-node-46wdb","calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:08:17.960542 kubelet[2034]: E1002 19:08:17.960161 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:08:17.960542 kubelet[2034]: E1002 19:08:17.960173 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:17.960542 kubelet[2034]: E1002 19:08:17.960188 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:08:17.960542 kubelet[2034]: E1002 19:08:17.960201 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:08:17.960542 kubelet[2034]: E1002 19:08:17.960215 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:08:17.960542 kubelet[2034]: E1002 19:08:17.960226 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:08:17.960542 kubelet[2034]: E1002 19:08:17.960236 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:08:17.960542 kubelet[2034]: I1002 19:08:17.960256 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:08:19.478685 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3653988322.mount: Deactivated successfully. Oct 2 19:08:20.463131 env[1122]: time="2023-10-02T19:08:20.463047807Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:20.475100 env[1122]: time="2023-10-02T19:08:20.475021136Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:20.477688 env[1122]: time="2023-10-02T19:08:20.477633422Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:20.485342 env[1122]: time="2023-10-02T19:08:20.485296006Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:20.485559 env[1122]: time="2023-10-02T19:08:20.485527935Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e\"" Oct 2 19:08:20.491464 env[1122]: time="2023-10-02T19:08:20.491408769Z" level=info msg="CreateContainer within sandbox \"49a215e000ef84e971d427e670a499ecced1ce3c6e8a2c43ef2b683344b7dae9\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:08:20.523659 env[1122]: time="2023-10-02T19:08:20.523554720Z" level=info msg="CreateContainer within sandbox \"49a215e000ef84e971d427e670a499ecced1ce3c6e8a2c43ef2b683344b7dae9\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"ca5cd9d650d00c4236c7effc919f629eb787deb4bb250fb3c22564a84606d8f9\"" Oct 2 19:08:20.524376 env[1122]: time="2023-10-02T19:08:20.524310633Z" level=info msg="StartContainer for \"ca5cd9d650d00c4236c7effc919f629eb787deb4bb250fb3c22564a84606d8f9\"" Oct 2 19:08:20.548167 systemd[1]: Started cri-containerd-ca5cd9d650d00c4236c7effc919f629eb787deb4bb250fb3c22564a84606d8f9.scope. Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.566245 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 19:08:20.566320 kernel: audit: type=1400 audit(1696273700.564:1178): avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2443 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:20.572241 kernel: audit: type=1300 audit(1696273700.564:1178): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2443 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:20.572458 kernel: audit: type=1327 audit(1696273700.564:1178): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356364396436353064303063343233366337656666633931396636 Oct 2 19:08:20.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356364396436353064303063343233366337656666633931396636 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.577907 kernel: audit: type=1400 audit(1696273700.564:1179): avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.577978 kernel: audit: type=1400 audit(1696273700.564:1179): avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.581357 kernel: audit: type=1400 audit(1696273700.564:1179): avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.587948 kernel: audit: type=1400 audit(1696273700.564:1179): avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.588145 kernel: audit: type=1400 audit(1696273700.564:1179): avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.590991 kernel: audit: type=1400 audit(1696273700.564:1179): avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.591037 kernel: audit: type=1400 audit(1696273700.564:1179): avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.564000 audit: BPF prog-id=142 op=LOAD Oct 2 19:08:20.564000 audit[2868]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000090810 items=0 ppid=2443 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:20.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356364396436353064303063343233366337656666633931396636 Oct 2 19:08:20.568000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.568000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.568000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.568000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.568000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.568000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.568000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.568000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.568000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.568000 audit: BPF prog-id=143 op=LOAD Oct 2 19:08:20.568000 audit[2868]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000090858 items=0 ppid=2443 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:20.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356364396436353064303063343233366337656666633931396636 Oct 2 19:08:20.571000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:08:20.571000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:20.571000 audit: BPF prog-id=144 op=LOAD Oct 2 19:08:20.571000 audit[2868]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000908e8 items=0 ppid=2443 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:20.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356364396436353064303063343233366337656666633931396636 Oct 2 19:08:20.601222 env[1122]: time="2023-10-02T19:08:20.601153741Z" level=info msg="StartContainer for \"ca5cd9d650d00c4236c7effc919f629eb787deb4bb250fb3c22564a84606d8f9\" returns successfully" Oct 2 19:08:20.675505 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:08:20.675661 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:08:20.722841 kubelet[2034]: E1002 19:08:20.721367 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:20.742964 kubelet[2034]: I1002 19:08:20.740937 2034 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-46wdb" podStartSLOduration=1.177026169 podCreationTimestamp="2023-10-02 19:07:49 +0000 UTC" firstStartedPulling="2023-10-02 19:07:49.922372265 +0000 UTC m=+26.782407347" lastFinishedPulling="2023-10-02 19:08:20.486230094 +0000 UTC m=+57.346265176" observedRunningTime="2023-10-02 19:08:20.740227106 +0000 UTC m=+57.600262208" watchObservedRunningTime="2023-10-02 19:08:20.740883998 +0000 UTC m=+57.600919070" Oct 2 19:08:21.507004 systemd[1]: run-containerd-runc-k8s.io-ca5cd9d650d00c4236c7effc919f629eb787deb4bb250fb3c22564a84606d8f9-runc.yKht1P.mount: Deactivated successfully. Oct 2 19:08:21.723467 kubelet[2034]: E1002 19:08:21.723420 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:21.740786 systemd[1]: run-containerd-runc-k8s.io-ca5cd9d650d00c4236c7effc919f629eb787deb4bb250fb3c22564a84606d8f9-runc.thUrkq.mount: Deactivated successfully. Oct 2 19:08:21.817426 systemd[1]: Started sshd@9-10.0.0.35:22-10.0.0.1:34518.service. Oct 2 19:08:21.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.35:22-10.0.0.1:34518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:21.859000 audit[2976]: USER_ACCT pid=2976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:21.861088 sshd[2976]: Accepted publickey for core from 10.0.0.1 port 34518 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:08:21.861000 audit[2976]: CRED_ACQ pid=2976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:21.861000 audit[2976]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc9321f20 a2=3 a3=0 items=0 ppid=1 pid=2976 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:21.861000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:21.863010 sshd[2976]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:08:21.866761 systemd-logind[1110]: New session 10 of user core. Oct 2 19:08:21.867681 systemd[1]: Started session-10.scope. Oct 2 19:08:21.870000 audit[2976]: USER_START pid=2976 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:21.871000 audit[2978]: CRED_ACQ pid=2978 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:21.958000 audit[3014]: AVC avc: denied { write } for pid=3014 comm="tee" name="fd" dev="proc" ino=25604 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:08:21.958000 audit[3014]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd9fe6e983 a2=241 a3=1b6 items=1 ppid=2995 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:21.958000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:08:21.958000 audit: PATH item=0 name="/dev/fd/63" inode=23549 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:08:21.958000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:08:21.966000 audit[3045]: AVC avc: denied { write } for pid=3045 comm="tee" name="fd" dev="proc" ino=24108 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:08:21.966000 audit[3045]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff0389e984 a2=241 a3=1b6 items=1 ppid=2996 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:21.966000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:08:21.966000 audit: PATH item=0 name="/dev/fd/63" inode=25616 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:08:21.966000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:08:21.974000 audit[3037]: AVC avc: denied { write } for pid=3037 comm="tee" name="fd" dev="proc" ino=25622 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:08:21.974000 audit[3037]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe9106a993 a2=241 a3=1b6 items=1 ppid=3005 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:21.974000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:08:21.974000 audit: PATH item=0 name="/dev/fd/63" inode=25609 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:08:21.974000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:08:21.984000 audit[3054]: AVC avc: denied { write } for pid=3054 comm="tee" name="fd" dev="proc" ino=25629 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:08:22.000000 audit[3057]: AVC avc: denied { write } for pid=3057 comm="tee" name="fd" dev="proc" ino=22504 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:08:22.000000 audit[3057]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd22dbc995 a2=241 a3=1b6 items=1 ppid=2998 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:22.000000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:08:22.000000 audit: PATH item=0 name="/dev/fd/63" inode=25625 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:08:22.000000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:08:21.984000 audit[3054]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdb8847993 a2=241 a3=1b6 items=1 ppid=3011 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:21.984000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:08:21.984000 audit: PATH item=0 name="/dev/fd/63" inode=25619 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:08:21.984000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:08:22.005000 audit[3071]: AVC avc: denied { write } for pid=3071 comm="tee" name="fd" dev="proc" ino=22508 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:08:22.005000 audit[3071]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffde91f1993 a2=241 a3=1b6 items=1 ppid=3003 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:22.005000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:08:22.005000 audit: PATH item=0 name="/dev/fd/63" inode=25632 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:08:22.005000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:08:22.009000 audit[3078]: AVC avc: denied { write } for pid=3078 comm="tee" name="fd" dev="proc" ino=22512 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:08:22.009000 audit[3078]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff8c94e994 a2=241 a3=1b6 items=1 ppid=2997 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:22.009000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:08:22.009000 audit: PATH item=0 name="/dev/fd/63" inode=24804 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:08:22.009000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:08:22.277856 sshd[2976]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:22.278000 audit[2976]: USER_END pid=2976 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:22.278000 audit[2976]: CRED_DISP pid=2976 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:22.280821 systemd[1]: sshd@9-10.0.0.35:22-10.0.0.1:34518.service: Deactivated successfully. Oct 2 19:08:22.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.35:22-10.0.0.1:34518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:22.281890 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:08:22.282607 systemd-logind[1110]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:08:22.283677 systemd-logind[1110]: Removed session 10. Oct 2 19:08:22.405243 env[1122]: time="2023-10-02T19:08:22.405184682Z" level=info msg="StopPodSandbox for \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\"" Oct 2 19:08:22.939000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:22.939000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0019385c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:08:22.939000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:22.940000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:22.940000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0028b7c20 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:08:22.940000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:23.029000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:23.029000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0017db660 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:08:23.029000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:23.029000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:23.029000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001463580 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:08:23.029000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.448 [INFO][3127] k8s.go 576: Cleaning up netns ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.449 [INFO][3127] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" iface="eth0" netns="/var/run/netns/cni-e4679d83-37d4-64eb-973a-39d25be5bfae" Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.449 [INFO][3127] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" iface="eth0" netns="/var/run/netns/cni-e4679d83-37d4-64eb-973a-39d25be5bfae" Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.449 [INFO][3127] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" iface="eth0" netns="/var/run/netns/cni-e4679d83-37d4-64eb-973a-39d25be5bfae" Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.450 [INFO][3127] k8s.go 583: Releasing IP address(es) ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.450 [INFO][3127] utils.go 196: Calico CNI releasing IP address ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.529 [INFO][3138] ipam_plugin.go 416: Releasing address using handleID ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" HandleID="k8s-pod-network.6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:23.832719 env[1122]: time="2023-10-02T19:08:23Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:08:23.832719 env[1122]: time="2023-10-02T19:08:23Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.631 [WARNING][3138] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" HandleID="k8s-pod-network.6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.631 [INFO][3138] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" HandleID="k8s-pod-network.6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:23.832719 env[1122]: time="2023-10-02T19:08:23Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:08:23.832719 env[1122]: 2023-10-02 19:08:23.830 [INFO][3127] k8s.go 589: Teardown processing complete. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:23.833656 env[1122]: time="2023-10-02T19:08:23.832939031Z" level=info msg="TearDown network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\" successfully" Oct 2 19:08:23.833656 env[1122]: time="2023-10-02T19:08:23.832978778Z" level=info msg="StopPodSandbox for \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\" returns successfully" Oct 2 19:08:23.834312 systemd[1]: run-netns-cni\x2de4679d83\x2d37d4\x2d64eb\x2d973a\x2d39d25be5bfae.mount: Deactivated successfully. Oct 2 19:08:23.834877 env[1122]: time="2023-10-02T19:08:23.834813052Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-j28n9,Uid:6227d699-f00d-44ab-8bb0-9c81a862cbbf,Namespace:calico-system,Attempt:1,}" Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit: BPF prog-id=145 op=LOAD Oct 2 19:08:24.742000 audit[3184]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff37a1eec0 a2=70 a3=7fadcadaf000 items=0 ppid=3020 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.742000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:08:24.742000 audit: BPF prog-id=145 op=UNLOAD Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit: BPF prog-id=146 op=LOAD Oct 2 19:08:24.742000 audit[3184]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff37a1eec0 a2=70 a3=6e items=0 ppid=3020 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.742000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:08:24.742000 audit: BPF prog-id=146 op=UNLOAD Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff37a1ee70 a2=70 a3=7fff37a1eec0 items=0 ppid=3020 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.742000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit: BPF prog-id=147 op=LOAD Oct 2 19:08:24.742000 audit[3184]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff37a1ee50 a2=70 a3=7fff37a1eec0 items=0 ppid=3020 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.742000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:08:24.742000 audit: BPF prog-id=147 op=UNLOAD Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff37a1ef30 a2=70 a3=0 items=0 ppid=3020 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.742000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff37a1ef20 a2=70 a3=0 items=0 ppid=3020 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.742000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:08:24.742000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.742000 audit[3184]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fff37a1ef60 a2=70 a3=0 items=0 ppid=3020 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.742000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { perfmon } for pid=3184 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit[3184]: AVC avc: denied { bpf } for pid=3184 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.743000 audit: BPF prog-id=148 op=LOAD Oct 2 19:08:24.743000 audit[3184]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff37a1ee80 a2=70 a3=ffffffff items=0 ppid=3020 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.743000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:08:24.749000 audit[3191]: AVC avc: denied { bpf } for pid=3191 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.749000 audit[3191]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffea5852610 a2=70 a3=208 items=0 ppid=3020 pid=3191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.749000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:08:24.749000 audit[3191]: AVC avc: denied { bpf } for pid=3191 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.749000 audit[3191]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffea58524e0 a2=70 a3=3 items=0 ppid=3020 pid=3191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.749000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:08:24.755000 audit: BPF prog-id=148 op=UNLOAD Oct 2 19:08:24.943000 audit[3214]: NETFILTER_CFG table=raw:97 family=2 entries=19 op=nft_register_chain pid=3214 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:08:24.943000 audit[3214]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffcbb5a2c40 a2=0 a3=7ffcbb5a2c2c items=0 ppid=3020 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.943000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:08:24.953588 systemd-networkd[1019]: vxlan.calico: Link UP Oct 2 19:08:24.953605 systemd-networkd[1019]: vxlan.calico: Gained carrier Oct 2 19:08:24.956000 audit[3222]: NETFILTER_CFG table=mangle:98 family=2 entries=19 op=nft_register_chain pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:08:24.956000 audit[3222]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffde5a38c70 a2=0 a3=7ffde5a38c5c items=0 ppid=3020 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.956000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:08:24.962000 audit[3221]: NETFILTER_CFG table=filter:99 family=2 entries=39 op=nft_register_chain pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:08:24.962000 audit[3221]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7ffe35e4bb00 a2=0 a3=55b166145000 items=0 ppid=3020 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.962000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:08:24.963000 audit[3224]: NETFILTER_CFG table=nat:100 family=2 entries=16 op=nft_register_chain pid=3224 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:08:24.963000 audit[3224]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffdb337ded0 a2=0 a3=563d6aa36000 items=0 ppid=3020 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.963000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:08:26.156522 systemd-networkd[1019]: cali1ad4dc05490: Link UP Oct 2 19:08:26.159500 systemd-networkd[1019]: cali1ad4dc05490: Gained carrier Oct 2 19:08:26.159885 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1ad4dc05490: link becomes ready Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:25.584 [INFO][3228] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--j28n9-eth0 csi-node-driver- calico-system 6227d699-f00d-44ab-8bb0-9c81a862cbbf 832 0 2023-10-02 19:08:09 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6b49688c47 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-j28n9 eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali1ad4dc05490 [] []}} ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Namespace="calico-system" Pod="csi-node-driver-j28n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--j28n9-" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:25.592 [INFO][3228] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Namespace="calico-system" Pod="csi-node-driver-j28n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:25.912 [INFO][3242] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" HandleID="k8s-pod-network.1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:25.932 [INFO][3242] ipam_plugin.go 269: Auto assigning IP ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" HandleID="k8s-pod-network.1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0000c7aa0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-j28n9", "timestamp":"2023-10-02 19:08:25.912361507 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:08:26.168737 env[1122]: time="2023-10-02T19:08:25Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:08:26.168737 env[1122]: time="2023-10-02T19:08:25Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:25.932 [INFO][3242] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.002 [INFO][3242] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" host="localhost" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.044 [INFO][3242] ipam.go 372: Looking up existing affinities for host host="localhost" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.048 [INFO][3242] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.050 [INFO][3242] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.052 [INFO][3242] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.052 [INFO][3242] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" host="localhost" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.053 [INFO][3242] ipam.go 1682: Creating new handle: k8s-pod-network.1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07 Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.056 [INFO][3242] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" host="localhost" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.146 [INFO][3242] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" host="localhost" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.146 [INFO][3242] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" host="localhost" Oct 2 19:08:26.168737 env[1122]: time="2023-10-02T19:08:26Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:08:26.168737 env[1122]: 2023-10-02 19:08:26.147 [INFO][3242] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" HandleID="k8s-pod-network.1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:26.170049 env[1122]: 2023-10-02 19:08:26.149 [INFO][3228] k8s.go 383: Populated endpoint ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Namespace="calico-system" Pod="csi-node-driver-j28n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--j28n9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--j28n9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"6227d699-f00d-44ab-8bb0-9c81a862cbbf", ResourceVersion:"832", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 8, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-j28n9", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali1ad4dc05490", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:08:26.170049 env[1122]: 2023-10-02 19:08:26.149 [INFO][3228] k8s.go 384: Calico CNI using IPs: [192.168.88.129/32] ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Namespace="calico-system" Pod="csi-node-driver-j28n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:26.170049 env[1122]: 2023-10-02 19:08:26.149 [INFO][3228] dataplane_linux.go 68: Setting the host side veth name to cali1ad4dc05490 ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Namespace="calico-system" Pod="csi-node-driver-j28n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:26.170049 env[1122]: 2023-10-02 19:08:26.150 [INFO][3228] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Namespace="calico-system" Pod="csi-node-driver-j28n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:26.170049 env[1122]: 2023-10-02 19:08:26.159 [INFO][3228] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Namespace="calico-system" Pod="csi-node-driver-j28n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--j28n9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--j28n9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"6227d699-f00d-44ab-8bb0-9c81a862cbbf", ResourceVersion:"832", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 8, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07", Pod:"csi-node-driver-j28n9", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali1ad4dc05490", MAC:"e2:fb:45:ec:cc:f6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:08:26.170049 env[1122]: 2023-10-02 19:08:26.166 [INFO][3228] k8s.go 489: Wrote updated endpoint to datastore ContainerID="1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07" Namespace="calico-system" Pod="csi-node-driver-j28n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:26.180000 audit[3274]: NETFILTER_CFG table=filter:101 family=2 entries=36 op=nft_register_chain pid=3274 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:08:26.188474 kernel: kauditd_printk_skb: 174 callbacks suppressed Oct 2 19:08:26.188542 kernel: audit: type=1325 audit(1696273706.180:1222): table=filter:101 family=2 entries=36 op=nft_register_chain pid=3274 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:08:26.180000 audit[3274]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7fff85e55000 a2=0 a3=7fff85e54fec items=0 ppid=3020 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:26.193541 kernel: audit: type=1300 audit(1696273706.180:1222): arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7fff85e55000 a2=0 a3=7fff85e54fec items=0 ppid=3020 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:26.193597 kernel: audit: type=1327 audit(1696273706.180:1222): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:08:26.180000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:08:26.225829 env[1122]: time="2023-10-02T19:08:26.225695838Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:08:26.225829 env[1122]: time="2023-10-02T19:08:26.225756095Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:08:26.225829 env[1122]: time="2023-10-02T19:08:26.225766414Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:08:26.226229 env[1122]: time="2023-10-02T19:08:26.226150055Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07 pid=3282 runtime=io.containerd.runc.v2 Oct 2 19:08:26.238302 systemd[1]: run-containerd-runc-k8s.io-1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07-runc.vZb68h.mount: Deactivated successfully. Oct 2 19:08:26.240777 systemd[1]: Started cri-containerd-1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07.scope. Oct 2 19:08:26.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263861 kernel: audit: type=1400 audit(1696273706.250:1223): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263929 kernel: audit: type=1400 audit(1696273706.250:1224): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.266221 kernel: audit: type=1400 audit(1696273706.250:1225): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.268665 kernel: audit: type=1400 audit(1696273706.250:1226): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.268722 kernel: audit: type=1400 audit(1696273706.250:1227): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.271099 systemd-resolved[1066]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 2 19:08:26.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.273495 kernel: audit: type=1400 audit(1696273706.250:1228): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.273531 kernel: audit: type=1400 audit(1696273706.250:1229): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit: BPF prog-id=149 op=LOAD Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3282 pid=3292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:26.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353339316537306333356333343336623232626363663235363534 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3282 pid=3292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:26.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353339316537306333356333343336623232626363663235363534 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.260000 audit: BPF prog-id=150 op=LOAD Oct 2 19:08:26.260000 audit[3292]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000391290 items=0 ppid=3282 pid=3292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:26.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353339316537306333356333343336623232626363663235363534 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit: BPF prog-id=151 op=LOAD Oct 2 19:08:26.263000 audit[3292]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003912d8 items=0 ppid=3282 pid=3292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:26.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353339316537306333356333343336623232626363663235363534 Oct 2 19:08:26.263000 audit: BPF prog-id=151 op=UNLOAD Oct 2 19:08:26.263000 audit: BPF prog-id=150 op=UNLOAD Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { perfmon } for pid=3292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit[3292]: AVC avc: denied { bpf } for pid=3292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:26.263000 audit: BPF prog-id=152 op=LOAD Oct 2 19:08:26.263000 audit[3292]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003916e8 items=0 ppid=3282 pid=3292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:26.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164353339316537306333356333343336623232626363663235363534 Oct 2 19:08:26.292355 env[1122]: time="2023-10-02T19:08:26.292298379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-j28n9,Uid:6227d699-f00d-44ab-8bb0-9c81a862cbbf,Namespace:calico-system,Attempt:1,} returns sandbox id \"1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07\"" Oct 2 19:08:26.295122 env[1122]: time="2023-10-02T19:08:26.295057459Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:08:26.558175 env[1122]: time="2023-10-02T19:08:26.558014440Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:08:26.626147 systemd-networkd[1019]: vxlan.calico: Gained IPv6LL Oct 2 19:08:26.656271 env[1122]: time="2023-10-02T19:08:26.656210987Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:08:26.656558 kubelet[2034]: E1002 19:08:26.656523 2034 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:08:26.656839 kubelet[2034]: E1002 19:08:26.656575 2034 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:08:26.705701 kubelet[2034]: E1002 19:08:26.705636 2034 kuberuntime_manager.go:1209] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-ctgt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:08:26.706555 env[1122]: time="2023-10-02T19:08:26.706504006Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:08:27.065581 env[1122]: time="2023-10-02T19:08:27.065495684Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:08:27.126163 env[1122]: time="2023-10-02T19:08:27.126074701Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:08:27.126441 kubelet[2034]: E1002 19:08:27.126397 2034 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:08:27.126524 kubelet[2034]: E1002 19:08:27.126449 2034 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:08:27.126570 kubelet[2034]: E1002 19:08:27.126544 2034 kuberuntime_manager.go:1209] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ctgt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:08:27.126682 kubelet[2034]: E1002 19:08:27.126612 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:08:27.736181 kubelet[2034]: E1002 19:08:27.736137 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:08:27.973107 kubelet[2034]: I1002 19:08:27.973060 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:27.973107 kubelet[2034]: I1002 19:08:27.973093 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:08:27.974314 env[1122]: time="2023-10-02T19:08:27.974269373Z" level=info msg="StopPodSandbox for \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\"" Oct 2 19:08:28.040950 systemd-networkd[1019]: cali1ad4dc05490: Gained IPv6LL Oct 2 19:08:28.058606 env[1122]: 2023-10-02 19:08:28.017 [WARNING][3339] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--j28n9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"6227d699-f00d-44ab-8bb0-9c81a862cbbf", ResourceVersion:"850", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 8, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07", Pod:"csi-node-driver-j28n9", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali1ad4dc05490", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:08:28.058606 env[1122]: 2023-10-02 19:08:28.017 [INFO][3339] k8s.go 576: Cleaning up netns ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:28.058606 env[1122]: 2023-10-02 19:08:28.017 [INFO][3339] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" iface="eth0" netns="" Oct 2 19:08:28.058606 env[1122]: 2023-10-02 19:08:28.017 [INFO][3339] k8s.go 583: Releasing IP address(es) ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:28.058606 env[1122]: 2023-10-02 19:08:28.017 [INFO][3339] utils.go 196: Calico CNI releasing IP address ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:28.058606 env[1122]: 2023-10-02 19:08:28.049 [INFO][3347] ipam_plugin.go 416: Releasing address using handleID ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" HandleID="k8s-pod-network.6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:28.058606 env[1122]: time="2023-10-02T19:08:28Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:08:28.058606 env[1122]: time="2023-10-02T19:08:28Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:08:28.058606 env[1122]: 2023-10-02 19:08:28.055 [WARNING][3347] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" HandleID="k8s-pod-network.6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:28.058606 env[1122]: 2023-10-02 19:08:28.055 [INFO][3347] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" HandleID="k8s-pod-network.6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:28.058606 env[1122]: time="2023-10-02T19:08:28Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:08:28.058606 env[1122]: 2023-10-02 19:08:28.057 [INFO][3339] k8s.go 589: Teardown processing complete. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:28.059194 env[1122]: time="2023-10-02T19:08:28.058636025Z" level=info msg="TearDown network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\" successfully" Oct 2 19:08:28.059194 env[1122]: time="2023-10-02T19:08:28.058676724Z" level=info msg="StopPodSandbox for \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\" returns successfully" Oct 2 19:08:28.059194 env[1122]: time="2023-10-02T19:08:28.059150065Z" level=info msg="RemovePodSandbox for \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\"" Oct 2 19:08:28.059497 env[1122]: time="2023-10-02T19:08:28.059185053Z" level=info msg="Forcibly stopping sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\"" Oct 2 19:08:28.311655 env[1122]: 2023-10-02 19:08:28.193 [WARNING][3370] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--j28n9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"6227d699-f00d-44ab-8bb0-9c81a862cbbf", ResourceVersion:"850", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 8, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6b49688c47", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1d5391e70c35c3436b22bccf25654d40c7483bd244c5b9e7a9349f82f82f4b07", Pod:"csi-node-driver-j28n9", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali1ad4dc05490", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:08:28.311655 env[1122]: 2023-10-02 19:08:28.193 [INFO][3370] k8s.go 576: Cleaning up netns ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:28.311655 env[1122]: 2023-10-02 19:08:28.193 [INFO][3370] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" iface="eth0" netns="" Oct 2 19:08:28.311655 env[1122]: 2023-10-02 19:08:28.193 [INFO][3370] k8s.go 583: Releasing IP address(es) ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:28.311655 env[1122]: 2023-10-02 19:08:28.193 [INFO][3370] utils.go 196: Calico CNI releasing IP address ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:28.311655 env[1122]: 2023-10-02 19:08:28.215 [INFO][3381] ipam_plugin.go 416: Releasing address using handleID ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" HandleID="k8s-pod-network.6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:28.311655 env[1122]: time="2023-10-02T19:08:28Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:08:28.311655 env[1122]: time="2023-10-02T19:08:28Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:08:28.311655 env[1122]: 2023-10-02 19:08:28.294 [WARNING][3381] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" HandleID="k8s-pod-network.6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:28.311655 env[1122]: 2023-10-02 19:08:28.294 [INFO][3381] ipam_plugin.go 444: Releasing address using workloadID ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" HandleID="k8s-pod-network.6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Workload="localhost-k8s-csi--node--driver--j28n9-eth0" Oct 2 19:08:28.311655 env[1122]: time="2023-10-02T19:08:28Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:08:28.311655 env[1122]: 2023-10-02 19:08:28.310 [INFO][3370] k8s.go 589: Teardown processing complete. ContainerID="6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd" Oct 2 19:08:28.312576 env[1122]: time="2023-10-02T19:08:28.311613592Z" level=info msg="TearDown network for sandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\" successfully" Oct 2 19:08:28.390600 env[1122]: time="2023-10-02T19:08:28.390516963Z" level=info msg="RemovePodSandbox \"6ac59796c0f423eac15be048ded5b09474b903cbabc54105f34eab34bb6b8dcd\" returns successfully" Oct 2 19:08:28.391159 kubelet[2034]: I1002 19:08:28.391123 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:08:28.403199 kubelet[2034]: I1002 19:08:28.403165 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:28.403374 kubelet[2034]: I1002 19:08:28.403254 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:08:28.403374 kubelet[2034]: E1002 19:08:28.403279 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:28.403374 kubelet[2034]: E1002 19:08:28.403289 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:08:28.403374 kubelet[2034]: E1002 19:08:28.403297 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:08:28.403374 kubelet[2034]: E1002 19:08:28.403306 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:08:28.403374 kubelet[2034]: E1002 19:08:28.403314 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:08:28.403374 kubelet[2034]: E1002 19:08:28.403322 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:08:28.403374 kubelet[2034]: E1002 19:08:28.403331 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:08:28.403374 kubelet[2034]: I1002 19:08:28.403340 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:08:29.566016 kubelet[2034]: E1002 19:08:29.565969 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:32.282526 systemd[1]: Started sshd@10-10.0.0.35:22-10.0.0.1:36464.service. Oct 2 19:08:32.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.35:22-10.0.0.1:36464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:32.285888 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:08:32.285949 kernel: audit: type=1130 audit(1696273712.281:1241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.35:22-10.0.0.1:36464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:32.355000 audit[3420]: USER_ACCT pid=3420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.356729 sshd[3420]: Accepted publickey for core from 10.0.0.1 port 36464 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:08:32.375877 kernel: audit: type=1101 audit(1696273712.355:1242): pid=3420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.375962 kernel: audit: type=1103 audit(1696273712.374:1243): pid=3420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.374000 audit[3420]: CRED_ACQ pid=3420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.379908 kernel: audit: type=1006 audit(1696273712.375:1244): pid=3420 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:08:32.379945 kernel: audit: type=1300 audit(1696273712.375:1244): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd950c0b90 a2=3 a3=0 items=0 ppid=1 pid=3420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:32.375000 audit[3420]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd950c0b90 a2=3 a3=0 items=0 ppid=1 pid=3420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:32.375000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:32.383491 kernel: audit: type=1327 audit(1696273712.375:1244): proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:32.386390 sshd[3420]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:08:32.390148 systemd-logind[1110]: New session 11 of user core. Oct 2 19:08:32.391223 systemd[1]: Started session-11.scope. Oct 2 19:08:32.395000 audit[3420]: USER_START pid=3420 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.397000 audit[3422]: CRED_ACQ pid=3422 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.401659 kernel: audit: type=1105 audit(1696273712.395:1245): pid=3420 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.401722 kernel: audit: type=1103 audit(1696273712.397:1246): pid=3422 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.606542 sshd[3420]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:32.606000 audit[3420]: USER_END pid=3420 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.610076 systemd[1]: sshd@10-10.0.0.35:22-10.0.0.1:36464.service: Deactivated successfully. Oct 2 19:08:32.610765 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:08:32.612576 systemd[1]: Started sshd@11-10.0.0.35:22-10.0.0.1:36468.service. Oct 2 19:08:32.615547 systemd-logind[1110]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:08:32.616533 systemd-logind[1110]: Removed session 11. Oct 2 19:08:32.606000 audit[3420]: CRED_DISP pid=3420 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.644155 kernel: audit: type=1106 audit(1696273712.606:1247): pid=3420 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.644223 kernel: audit: type=1104 audit(1696273712.606:1248): pid=3420 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.35:22-10.0.0.1:36464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:32.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.35:22-10.0.0.1:36468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:32.674000 audit[3434]: USER_ACCT pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.675608 sshd[3434]: Accepted publickey for core from 10.0.0.1 port 36468 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:08:32.675000 audit[3434]: CRED_ACQ pid=3434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.675000 audit[3434]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc02ccf490 a2=3 a3=0 items=0 ppid=1 pid=3434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:32.675000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:32.676931 sshd[3434]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:08:32.681226 systemd-logind[1110]: New session 12 of user core. Oct 2 19:08:32.682452 systemd[1]: Started session-12.scope. Oct 2 19:08:32.686000 audit[3434]: USER_START pid=3434 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.688000 audit[3436]: CRED_ACQ pid=3436 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.984000 audit[3434]: USER_END pid=3434 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.984000 audit[3434]: CRED_DISP pid=3434 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:32.983978 sshd[3434]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:32.987628 systemd[1]: sshd@11-10.0.0.35:22-10.0.0.1:36468.service: Deactivated successfully. Oct 2 19:08:32.988191 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:08:32.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.35:22-10.0.0.1:36468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:32.988772 systemd-logind[1110]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:08:32.989985 systemd[1]: Started sshd@12-10.0.0.35:22-10.0.0.1:36474.service. Oct 2 19:08:32.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.35:22-10.0.0.1:36474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:32.990873 systemd-logind[1110]: Removed session 12. Oct 2 19:08:33.035000 audit[3451]: USER_ACCT pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:33.036119 sshd[3451]: Accepted publickey for core from 10.0.0.1 port 36474 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:08:33.036000 audit[3451]: CRED_ACQ pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:33.036000 audit[3451]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcfa232e0 a2=3 a3=0 items=0 ppid=1 pid=3451 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:33.036000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:33.037354 sshd[3451]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:08:33.040963 systemd-logind[1110]: New session 13 of user core. Oct 2 19:08:33.041843 systemd[1]: Started session-13.scope. Oct 2 19:08:33.044000 audit[3451]: USER_START pid=3451 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:33.046000 audit[3453]: CRED_ACQ pid=3453 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:33.176942 sshd[3451]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:33.177000 audit[3451]: USER_END pid=3451 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:33.177000 audit[3451]: CRED_DISP pid=3451 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:33.179968 systemd[1]: sshd@12-10.0.0.35:22-10.0.0.1:36474.service: Deactivated successfully. Oct 2 19:08:33.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.35:22-10.0.0.1:36474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:33.180749 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:08:33.181520 systemd-logind[1110]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:08:33.183480 systemd-logind[1110]: Removed session 13. Oct 2 19:08:38.418488 kubelet[2034]: I1002 19:08:38.418447 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:38.418488 kubelet[2034]: I1002 19:08:38.418475 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:08:38.419808 kubelet[2034]: I1002 19:08:38.419789 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:08:38.431094 kubelet[2034]: I1002 19:08:38.431065 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:38.431272 kubelet[2034]: I1002 19:08:38.431163 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:08:38.431272 kubelet[2034]: E1002 19:08:38.431193 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:38.431272 kubelet[2034]: E1002 19:08:38.431204 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:08:38.431272 kubelet[2034]: E1002 19:08:38.431212 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:08:38.431272 kubelet[2034]: E1002 19:08:38.431220 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:08:38.431272 kubelet[2034]: E1002 19:08:38.431227 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:08:38.431272 kubelet[2034]: E1002 19:08:38.431235 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:08:38.431272 kubelet[2034]: E1002 19:08:38.431241 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:08:38.431272 kubelet[2034]: I1002 19:08:38.431250 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:08:42.406351 env[1122]: time="2023-10-02T19:08:42.406299576Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:08:42.690886 env[1122]: time="2023-10-02T19:08:42.690781108Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:08:42.814136 env[1122]: time="2023-10-02T19:08:42.814041800Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:08:42.814416 kubelet[2034]: E1002 19:08:42.814381 2034 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:08:42.814688 kubelet[2034]: E1002 19:08:42.814433 2034 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:08:42.814688 kubelet[2034]: E1002 19:08:42.814539 2034 kuberuntime_manager.go:1209] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-ctgt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:08:42.815352 env[1122]: time="2023-10-02T19:08:42.815316881Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:08:43.141023 env[1122]: time="2023-10-02T19:08:43.140800397Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:08:43.148259 env[1122]: time="2023-10-02T19:08:43.148179618Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:08:43.148568 kubelet[2034]: E1002 19:08:43.148529 2034 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:08:43.148645 kubelet[2034]: E1002 19:08:43.148587 2034 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:08:43.148716 kubelet[2034]: E1002 19:08:43.148699 2034 kuberuntime_manager.go:1209] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ctgt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:08:43.148846 kubelet[2034]: E1002 19:08:43.148764 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:08:43.181762 systemd[1]: Started sshd@13-10.0.0.35:22-10.0.0.1:39856.service. Oct 2 19:08:43.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.35:22-10.0.0.1:39856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:43.183354 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:08:43.183421 kernel: audit: type=1130 audit(1696273723.181:1268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.35:22-10.0.0.1:39856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:43.221000 audit[3505]: USER_ACCT pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.224743 sshd[3505]: Accepted publickey for core from 10.0.0.1 port 39856 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:08:43.225052 sshd[3505]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:08:43.223000 audit[3505]: CRED_ACQ pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.229330 kernel: audit: type=1101 audit(1696273723.221:1269): pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.229404 kernel: audit: type=1103 audit(1696273723.223:1270): pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.229431 kernel: audit: type=1006 audit(1696273723.223:1271): pid=3505 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:08:43.223000 audit[3505]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbe4351f0 a2=3 a3=0 items=0 ppid=1 pid=3505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:43.234084 kernel: audit: type=1300 audit(1696273723.223:1271): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbe4351f0 a2=3 a3=0 items=0 ppid=1 pid=3505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:43.234166 kernel: audit: type=1327 audit(1696273723.223:1271): proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:43.223000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:43.233940 systemd[1]: Started session-14.scope. Oct 2 19:08:43.234381 systemd-logind[1110]: New session 14 of user core. Oct 2 19:08:43.241000 audit[3505]: USER_START pid=3505 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.241000 audit[3507]: CRED_ACQ pid=3507 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.248147 kernel: audit: type=1105 audit(1696273723.241:1272): pid=3505 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.248318 kernel: audit: type=1103 audit(1696273723.241:1273): pid=3507 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.406240 kubelet[2034]: E1002 19:08:43.406098 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:43.486016 sshd[3505]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:43.486000 audit[3505]: USER_END pid=3505 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.488296 systemd[1]: sshd@13-10.0.0.35:22-10.0.0.1:39856.service: Deactivated successfully. Oct 2 19:08:43.489217 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:08:43.489990 systemd-logind[1110]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:08:43.490817 systemd-logind[1110]: Removed session 14. Oct 2 19:08:43.486000 audit[3505]: CRED_DISP pid=3505 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.494184 kernel: audit: type=1106 audit(1696273723.486:1274): pid=3505 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.494259 kernel: audit: type=1104 audit(1696273723.486:1275): pid=3505 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:43.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.35:22-10.0.0.1:39856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:48.406068 kubelet[2034]: E1002 19:08:48.405611 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:48.445616 kubelet[2034]: I1002 19:08:48.445580 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:48.445616 kubelet[2034]: I1002 19:08:48.445617 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:08:48.446962 kubelet[2034]: I1002 19:08:48.446945 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:08:48.457871 kubelet[2034]: I1002 19:08:48.457819 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:48.458453 kubelet[2034]: I1002 19:08:48.458423 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:08:48.458506 kubelet[2034]: E1002 19:08:48.458464 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:48.458506 kubelet[2034]: E1002 19:08:48.458488 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:08:48.458506 kubelet[2034]: E1002 19:08:48.458500 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:08:48.458573 kubelet[2034]: E1002 19:08:48.458516 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:08:48.458573 kubelet[2034]: E1002 19:08:48.458533 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:08:48.458573 kubelet[2034]: E1002 19:08:48.458548 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:08:48.458662 kubelet[2034]: E1002 19:08:48.458645 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:08:48.458691 kubelet[2034]: I1002 19:08:48.458673 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:08:51.405479 kubelet[2034]: E1002 19:08:51.405424 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:53.407236 kubelet[2034]: E1002 19:08:53.407189 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:08:53.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.35:22-10.0.0.1:52838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:53.491929 systemd[1]: Started sshd@14-10.0.0.35:22-10.0.0.1:52838.service. Oct 2 19:08:53.496182 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:08:53.496259 kernel: audit: type=1130 audit(1696273733.491:1277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.35:22-10.0.0.1:52838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:53.534000 audit[3543]: USER_ACCT pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.535263 sshd[3543]: Accepted publickey for core from 10.0.0.1 port 52838 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:08:53.536685 sshd[3543]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:08:53.541339 systemd-logind[1110]: New session 15 of user core. Oct 2 19:08:53.541748 systemd[1]: Started session-15.scope. Oct 2 19:08:53.535000 audit[3543]: CRED_ACQ pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.556703 kernel: audit: type=1101 audit(1696273733.534:1278): pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.556810 kernel: audit: type=1103 audit(1696273733.535:1279): pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.535000 audit[3543]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe98e137d0 a2=3 a3=0 items=0 ppid=1 pid=3543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:53.561154 kernel: audit: type=1006 audit(1696273733.535:1280): pid=3543 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:08:53.561213 kernel: audit: type=1300 audit(1696273733.535:1280): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe98e137d0 a2=3 a3=0 items=0 ppid=1 pid=3543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:53.561236 kernel: audit: type=1327 audit(1696273733.535:1280): proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:53.535000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:53.562110 kernel: audit: type=1105 audit(1696273733.548:1281): pid=3543 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.548000 audit[3543]: USER_START pid=3543 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.550000 audit[3545]: CRED_ACQ pid=3545 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.567607 kernel: audit: type=1103 audit(1696273733.550:1282): pid=3545 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.672083 sshd[3543]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:53.672000 audit[3543]: USER_END pid=3543 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.675045 systemd[1]: sshd@14-10.0.0.35:22-10.0.0.1:52838.service: Deactivated successfully. Oct 2 19:08:53.675941 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:08:53.672000 audit[3543]: CRED_DISP pid=3543 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.676658 systemd-logind[1110]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:08:53.677545 systemd-logind[1110]: Removed session 15. Oct 2 19:08:53.678639 kernel: audit: type=1106 audit(1696273733.672:1283): pid=3543 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.678697 kernel: audit: type=1104 audit(1696273733.672:1284): pid=3543 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:08:53.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.35:22-10.0.0.1:52838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:55.405667 kubelet[2034]: E1002 19:08:55.405609 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:08:55.480000 audit[3557]: NETFILTER_CFG table=filter:102 family=2 entries=14 op=nft_register_rule pid=3557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:55.480000 audit[3557]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd52b78d40 a2=0 a3=7ffd52b78d2c items=0 ppid=2197 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:55.480000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:55.481000 audit[3557]: NETFILTER_CFG table=nat:103 family=2 entries=14 op=nft_register_rule pid=3557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:55.481000 audit[3557]: SYSCALL arch=c000003e syscall=46 success=yes exit=3300 a0=3 a1=7ffd52b78d40 a2=0 a3=31030 items=0 ppid=2197 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:55.481000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:55.507000 audit[3559]: NETFILTER_CFG table=filter:104 family=2 entries=11 op=nft_register_rule pid=3559 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:55.507000 audit[3559]: SYSCALL arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7ffed092b4f0 a2=0 a3=7ffed092b4dc items=0 ppid=2197 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:55.507000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:55.509000 audit[3559]: NETFILTER_CFG table=nat:105 family=2 entries=35 op=nft_register_chain pid=3559 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:55.509000 audit[3559]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffed092b4f0 a2=0 a3=7ffed092b4dc items=0 ppid=2197 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:55.509000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:56.544000 audit[3562]: NETFILTER_CFG table=filter:106 family=2 entries=9 op=nft_register_rule pid=3562 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:56.544000 audit[3562]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffdaa204600 a2=0 a3=7ffdaa2045ec items=0 ppid=2197 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:56.544000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:56.544000 audit[3562]: NETFILTER_CFG table=nat:107 family=2 entries=20 op=nft_register_rule pid=3562 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:56.544000 audit[3562]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffdaa204600 a2=0 a3=7ffdaa2045ec items=0 ppid=2197 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:56.544000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:58.472947 kubelet[2034]: I1002 19:08:58.472899 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:58.473375 kubelet[2034]: I1002 19:08:58.473040 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:08:58.475287 kubelet[2034]: I1002 19:08:58.475268 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:08:58.486051 kubelet[2034]: I1002 19:08:58.486014 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:08:58.486191 kubelet[2034]: I1002 19:08:58.486114 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:08:58.486191 kubelet[2034]: E1002 19:08:58.486138 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:08:58.486191 kubelet[2034]: E1002 19:08:58.486149 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:08:58.486191 kubelet[2034]: E1002 19:08:58.486157 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:08:58.486191 kubelet[2034]: E1002 19:08:58.486165 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:08:58.486191 kubelet[2034]: E1002 19:08:58.486173 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:08:58.486191 kubelet[2034]: E1002 19:08:58.486180 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:08:58.486191 kubelet[2034]: E1002 19:08:58.486187 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:08:58.486191 kubelet[2034]: I1002 19:08:58.486196 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:09:03.678568 systemd[1]: Started sshd@15-10.0.0.35:22-10.0.0.1:58102.service. Oct 2 19:09:03.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.35:22-10.0.0.1:58102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.682865 kernel: kauditd_printk_skb: 19 callbacks suppressed Oct 2 19:09:03.682929 kernel: audit: type=1130 audit(1696273743.676:1292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.35:22-10.0.0.1:58102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:03.722000 audit[3595]: USER_ACCT pid=3595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.724887 sshd[3595]: Accepted publickey for core from 10.0.0.1 port 58102 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:09:03.727891 kernel: audit: type=1101 audit(1696273743.722:1293): pid=3595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.726000 audit[3595]: CRED_ACQ pid=3595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.728900 sshd[3595]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:03.736883 kernel: audit: type=1103 audit(1696273743.726:1294): pid=3595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.737004 kernel: audit: type=1006 audit(1696273743.726:1295): pid=3595 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:09:03.737038 kernel: audit: type=1300 audit(1696273743.726:1295): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9f62b2a0 a2=3 a3=0 items=0 ppid=1 pid=3595 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:03.737058 kernel: audit: type=1327 audit(1696273743.726:1295): proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:03.726000 audit[3595]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9f62b2a0 a2=3 a3=0 items=0 ppid=1 pid=3595 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:03.726000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:03.734475 systemd[1]: Started session-16.scope. Oct 2 19:09:03.734991 systemd-logind[1110]: New session 16 of user core. Oct 2 19:09:03.739000 audit[3595]: USER_START pid=3595 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.741000 audit[3597]: CRED_ACQ pid=3597 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.748374 kernel: audit: type=1105 audit(1696273743.739:1296): pid=3595 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.748441 kernel: audit: type=1103 audit(1696273743.741:1297): pid=3597 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.859810 sshd[3595]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:03.859000 audit[3595]: USER_END pid=3595 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.862624 systemd[1]: sshd@15-10.0.0.35:22-10.0.0.1:58102.service: Deactivated successfully. Oct 2 19:09:03.863371 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:09:03.863973 systemd-logind[1110]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:09:03.859000 audit[3595]: CRED_DISP pid=3595 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.864690 systemd-logind[1110]: Removed session 16. Oct 2 19:09:03.867520 kernel: audit: type=1106 audit(1696273743.859:1298): pid=3595 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.867582 kernel: audit: type=1104 audit(1696273743.859:1299): pid=3595 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:03.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.35:22-10.0.0.1:58102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.406324 env[1122]: time="2023-10-02T19:09:04.406239328Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:09:04.463000 audit[3608]: NETFILTER_CFG table=filter:108 family=2 entries=10 op=nft_register_rule pid=3608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:04.463000 audit[3608]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7fffcc9bc0b0 a2=0 a3=7fffcc9bc09c items=0 ppid=2197 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:04.463000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:04.465000 audit[3608]: NETFILTER_CFG table=nat:109 family=2 entries=20 op=nft_register_rule pid=3608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:04.465000 audit[3608]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7fffcc9bc0b0 a2=0 a3=7fffcc9bc09c items=0 ppid=2197 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:04.465000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:04.479000 audit[3610]: NETFILTER_CFG table=filter:110 family=2 entries=10 op=nft_register_rule pid=3610 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:04.479000 audit[3610]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffc754f3e40 a2=0 a3=7ffc754f3e2c items=0 ppid=2197 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:04.479000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:04.481000 audit[3610]: NETFILTER_CFG table=nat:111 family=2 entries=44 op=nft_register_rule pid=3610 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:04.481000 audit[3610]: SYSCALL arch=c000003e syscall=46 success=yes exit=13788 a0=3 a1=7ffc754f3e40 a2=0 a3=7ffc754f3e2c items=0 ppid=2197 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:04.481000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:04.671121 env[1122]: time="2023-10-02T19:09:04.671047264Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:09:04.672444 env[1122]: time="2023-10-02T19:09:04.672379549Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:09:04.672726 kubelet[2034]: E1002 19:09:04.672677 2034 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:09:04.672726 kubelet[2034]: E1002 19:09:04.672735 2034 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:09:04.673127 kubelet[2034]: E1002 19:09:04.672864 2034 kuberuntime_manager.go:1209] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-ctgt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:09:04.673548 env[1122]: time="2023-10-02T19:09:04.673524419Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:09:04.906965 env[1122]: time="2023-10-02T19:09:04.906792901Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:09:04.908144 env[1122]: time="2023-10-02T19:09:04.908090682Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:09:04.908439 kubelet[2034]: E1002 19:09:04.908392 2034 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:09:04.908523 kubelet[2034]: E1002 19:09:04.908450 2034 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:09:04.908566 kubelet[2034]: E1002 19:09:04.908552 2034 kuberuntime_manager.go:1209] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ctgt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:09:04.908684 kubelet[2034]: E1002 19:09:04.908608 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:09:06.018000 audit[3613]: NETFILTER_CFG table=filter:112 family=2 entries=10 op=nft_register_rule pid=3613 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:06.018000 audit[3613]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffd978bad90 a2=0 a3=7ffd978bad7c items=0 ppid=2197 pid=3613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:06.018000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:06.019000 audit[3613]: NETFILTER_CFG table=nat:113 family=2 entries=20 op=nft_register_rule pid=3613 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:06.019000 audit[3613]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffd978bad90 a2=0 a3=7ffd978bad7c items=0 ppid=2197 pid=3613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:06.019000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:07.031000 audit[3615]: NETFILTER_CFG table=filter:114 family=2 entries=10 op=nft_register_rule pid=3615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:07.031000 audit[3615]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7fff158763f0 a2=0 a3=7fff158763dc items=0 ppid=2197 pid=3615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:07.031000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:07.038000 audit[3615]: NETFILTER_CFG table=nat:115 family=2 entries=56 op=nft_register_chain pid=3615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:07.038000 audit[3615]: SYSCALL arch=c000003e syscall=46 success=yes exit=19452 a0=3 a1=7fff158763f0 a2=0 a3=7fff158763dc items=0 ppid=2197 pid=3615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:07.038000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:08.504413 kubelet[2034]: I1002 19:09:08.504371 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:08.504413 kubelet[2034]: I1002 19:09:08.504405 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:09:08.506287 kubelet[2034]: I1002 19:09:08.506251 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:09:08.518840 kubelet[2034]: I1002 19:09:08.518798 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:08.519059 kubelet[2034]: I1002 19:09:08.518905 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:09:08.519059 kubelet[2034]: E1002 19:09:08.518945 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:09:08.519059 kubelet[2034]: E1002 19:09:08.518958 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:09:08.519059 kubelet[2034]: E1002 19:09:08.518968 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:09:08.519059 kubelet[2034]: E1002 19:09:08.518977 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:09:08.519059 kubelet[2034]: E1002 19:09:08.518986 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:09:08.519059 kubelet[2034]: E1002 19:09:08.518995 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:09:08.519059 kubelet[2034]: E1002 19:09:08.519002 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:09:08.519059 kubelet[2034]: I1002 19:09:08.519011 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:09:09.583000 audit[3643]: NETFILTER_CFG table=filter:116 family=2 entries=10 op=nft_register_rule pid=3643 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:09.586892 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:09:09.587097 kernel: audit: type=1325 audit(1696273749.583:1309): table=filter:116 family=2 entries=10 op=nft_register_rule pid=3643 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:09.592287 kernel: audit: type=1300 audit(1696273749.583:1309): arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffc40e33050 a2=0 a3=7ffc40e3303c items=0 ppid=2197 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:09.583000 audit[3643]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7ffc40e33050 a2=0 a3=7ffc40e3303c items=0 ppid=2197 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:09.595128 kernel: audit: type=1327 audit(1696273749.583:1309): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:09.583000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:09.592000 audit[3643]: NETFILTER_CFG table=nat:117 family=2 entries=20 op=nft_register_rule pid=3643 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:09.592000 audit[3643]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffc40e33050 a2=0 a3=7ffc40e3303c items=0 ppid=2197 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:09.601658 kernel: audit: type=1325 audit(1696273749.592:1310): table=nat:117 family=2 entries=20 op=nft_register_rule pid=3643 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:09.601783 kernel: audit: type=1300 audit(1696273749.592:1310): arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7ffc40e33050 a2=0 a3=7ffc40e3303c items=0 ppid=2197 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:09.601802 kernel: audit: type=1327 audit(1696273749.592:1310): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:09.592000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:11.318000 audit[3645]: NETFILTER_CFG table=filter:118 family=2 entries=10 op=nft_register_rule pid=3645 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:11.318000 audit[3645]: SYSCALL arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7fffe394cf60 a2=0 a3=7fffe394cf4c items=0 ppid=2197 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:11.328508 kernel: audit: type=1325 audit(1696273751.318:1311): table=filter:118 family=2 entries=10 op=nft_register_rule pid=3645 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:11.328672 kernel: audit: type=1300 audit(1696273751.318:1311): arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7fffe394cf60 a2=0 a3=7fffe394cf4c items=0 ppid=2197 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:11.328733 kernel: audit: type=1327 audit(1696273751.318:1311): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:11.318000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:11.318000 audit[3645]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=3645 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:11.318000 audit[3645]: SYSCALL arch=c000003e syscall=46 success=yes exit=5484 a0=3 a1=7fffe394cf60 a2=0 a3=7fffe394cf4c items=0 ppid=2197 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:11.318000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:09:11.336886 kernel: audit: type=1325 audit(1696273751.318:1312): table=nat:119 family=2 entries=20 op=nft_register_rule pid=3645 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:09:13.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.35:22-10.0.0.1:55084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:13.868997 systemd[1]: Started sshd@16-10.0.0.35:22-10.0.0.1:55084.service. Oct 2 19:09:13.914000 audit[3647]: USER_ACCT pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:13.915822 sshd[3647]: Accepted publickey for core from 10.0.0.1 port 55084 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:09:13.917000 audit[3647]: CRED_ACQ pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:13.917000 audit[3647]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3d3a1700 a2=3 a3=0 items=0 ppid=1 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:13.917000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:13.919159 sshd[3647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:13.923815 systemd-logind[1110]: New session 17 of user core. Oct 2 19:09:13.924756 systemd[1]: Started session-17.scope. Oct 2 19:09:13.929000 audit[3647]: USER_START pid=3647 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:13.931000 audit[3649]: CRED_ACQ pid=3649 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:14.044195 sshd[3647]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:14.044000 audit[3647]: USER_END pid=3647 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:14.044000 audit[3647]: CRED_DISP pid=3647 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:14.046816 systemd[1]: sshd@16-10.0.0.35:22-10.0.0.1:55084.service: Deactivated successfully. Oct 2 19:09:14.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.35:22-10.0.0.1:55084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.047721 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:09:14.048583 systemd-logind[1110]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:09:14.049354 systemd-logind[1110]: Removed session 17. Oct 2 19:09:14.395000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:14.395000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0024c3dc0 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:09:14.395000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:14.395000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:14.395000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000875d10 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:09:14.395000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:16.652000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.681549 kernel: kauditd_printk_skb: 19 callbacks suppressed Oct 2 19:09:16.681726 kernel: audit: type=1400 audit(1696273756.652:1324): avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=4775 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.652000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.684783 kernel: audit: type=1400 audit(1696273756.652:1325): avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.684833 kernel: audit: type=1400 audit(1696273756.652:1326): avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.652000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=4782 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.687254 kernel: audit: type=1400 audit(1696273756.652:1327): avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.652000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.689611 kernel: audit: type=1300 audit(1696273756.652:1325): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0048eca80 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:09:16.652000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0048eca80 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:09:16.652000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:09:16.695386 kernel: audit: type=1327 audit(1696273756.652:1325): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:09:16.695434 kernel: audit: type=1300 audit(1696273756.652:1326): arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c012a898c0 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:09:16.652000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c012a898c0 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:09:16.652000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c012f6a620 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:09:16.728463 kernel: audit: type=1300 audit(1696273756.652:1327): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c012f6a620 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:09:16.728638 kernel: audit: type=1327 audit(1696273756.652:1326): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:09:16.652000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:09:16.652000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:09:16.734697 kernel: audit: type=1327 audit(1696273756.652:1327): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:09:16.652000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.652000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c012f6a660 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:09:16.652000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:09:16.652000 audit[1866]: AVC avc: denied { watch } for pid=1866 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=4780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:16.652000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c01358d800 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:09:16.652000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:09:16.652000 audit[1866]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00eb700c0 a2=fc6 a3=0 items=0 ppid=1730 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c696,c797 key=(null) Oct 2 19:09:16.652000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:09:18.538902 kubelet[2034]: I1002 19:09:18.538858 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:18.538902 kubelet[2034]: I1002 19:09:18.538900 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:09:18.541073 kubelet[2034]: I1002 19:09:18.541020 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:09:18.554516 kubelet[2034]: I1002 19:09:18.554477 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:18.554710 kubelet[2034]: I1002 19:09:18.554593 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:09:18.554710 kubelet[2034]: E1002 19:09:18.554629 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:09:18.554710 kubelet[2034]: E1002 19:09:18.554646 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:09:18.554710 kubelet[2034]: E1002 19:09:18.554658 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:09:18.554710 kubelet[2034]: E1002 19:09:18.554671 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:09:18.554710 kubelet[2034]: E1002 19:09:18.554681 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:09:18.554710 kubelet[2034]: E1002 19:09:18.554690 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:09:18.554710 kubelet[2034]: E1002 19:09:18.554699 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:09:18.554710 kubelet[2034]: I1002 19:09:18.554711 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:09:20.409043 kubelet[2034]: E1002 19:09:20.408975 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:09:23.052000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:23.054919 kernel: kauditd_printk_skb: 8 callbacks suppressed Oct 2 19:09:23.055258 kernel: audit: type=1400 audit(1696273763.052:1330): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:23.064136 kernel: audit: type=1300 audit(1696273763.052:1330): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b48500 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:09:23.052000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b48500 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:09:23.068386 kernel: audit: type=1327 audit(1696273763.052:1330): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:23.052000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:23.071695 kernel: audit: type=1400 audit(1696273763.052:1331): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:23.052000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:23.052000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0015ff300 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:09:23.082986 kernel: audit: type=1300 audit(1696273763.052:1331): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0015ff300 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:09:23.052000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:23.088187 kernel: audit: type=1327 audit(1696273763.052:1331): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:23.111000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:23.111000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b48980 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:09:23.123353 kernel: audit: type=1400 audit(1696273763.111:1332): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:23.123520 kernel: audit: type=1300 audit(1696273763.111:1332): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b48980 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:09:23.132402 kernel: audit: type=1327 audit(1696273763.111:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:23.111000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:23.141049 kernel: audit: type=1400 audit(1696273763.111:1333): avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:23.111000 audit[1932]: AVC avc: denied { watch } for pid=1932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=4769 scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:23.111000 audit[1932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d1b880 a2=fc6 a3=0 items=0 ppid=1798 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c208 key=(null) Oct 2 19:09:23.111000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:24.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.35:22-10.0.0.1:34252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:24.057659 systemd[1]: Started sshd@17-10.0.0.35:22-10.0.0.1:34252.service. Oct 2 19:09:24.223243 sshd[3686]: Accepted publickey for core from 10.0.0.1 port 34252 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:09:24.221000 audit[3686]: USER_ACCT pid=3686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:24.224000 audit[3686]: CRED_ACQ pid=3686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:24.224000 audit[3686]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff050452f0 a2=3 a3=0 items=0 ppid=1 pid=3686 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:24.224000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:24.227959 sshd[3686]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:24.273713 systemd[1]: Started session-18.scope. Oct 2 19:09:24.278335 systemd-logind[1110]: New session 18 of user core. Oct 2 19:09:24.337000 audit[3686]: USER_START pid=3686 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:24.342000 audit[3688]: CRED_ACQ pid=3688 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:24.409471 kubelet[2034]: E1002 19:09:24.408023 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:24.781669 sshd[3686]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:24.782000 audit[3686]: USER_END pid=3686 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:24.782000 audit[3686]: CRED_DISP pid=3686 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:24.784601 systemd[1]: sshd@17-10.0.0.35:22-10.0.0.1:34252.service: Deactivated successfully. Oct 2 19:09:24.785883 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:09:24.787494 systemd-logind[1110]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:09:24.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.35:22-10.0.0.1:34252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:24.790780 systemd-logind[1110]: Removed session 18. Oct 2 19:09:28.569324 kubelet[2034]: I1002 19:09:28.569276 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:28.569324 kubelet[2034]: I1002 19:09:28.569319 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:09:28.570603 kubelet[2034]: I1002 19:09:28.570589 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:09:28.581551 kubelet[2034]: I1002 19:09:28.581516 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:28.581726 kubelet[2034]: I1002 19:09:28.581608 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:09:28.581726 kubelet[2034]: E1002 19:09:28.581637 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:09:28.581726 kubelet[2034]: E1002 19:09:28.581648 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:09:28.581726 kubelet[2034]: E1002 19:09:28.581656 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:09:28.581726 kubelet[2034]: E1002 19:09:28.581665 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:09:28.581726 kubelet[2034]: E1002 19:09:28.581708 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:09:28.581726 kubelet[2034]: E1002 19:09:28.581727 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:09:28.582052 kubelet[2034]: E1002 19:09:28.581735 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:09:28.582052 kubelet[2034]: I1002 19:09:28.581744 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:09:31.409368 kubelet[2034]: E1002 19:09:31.409227 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:09:34.789864 systemd[1]: Started sshd@18-10.0.0.35:22-10.0.0.1:48810.service. Oct 2 19:09:34.795616 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:09:34.795783 kernel: audit: type=1130 audit(1696273774.789:1343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.35:22-10.0.0.1:48810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:34.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.35:22-10.0.0.1:48810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:34.844000 audit[3750]: USER_ACCT pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:34.846551 sshd[3750]: Accepted publickey for core from 10.0.0.1 port 48810 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:09:34.847768 sshd[3750]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:34.860008 kernel: audit: type=1101 audit(1696273774.844:1344): pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:34.860227 kernel: audit: type=1103 audit(1696273774.846:1345): pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:34.860357 kernel: audit: type=1006 audit(1696273774.846:1346): pid=3750 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 19:09:34.860399 kernel: audit: type=1300 audit(1696273774.846:1346): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb8ba6240 a2=3 a3=0 items=0 ppid=1 pid=3750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:34.860428 kernel: audit: type=1327 audit(1696273774.846:1346): proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:34.846000 audit[3750]: CRED_ACQ pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:34.846000 audit[3750]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb8ba6240 a2=3 a3=0 items=0 ppid=1 pid=3750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:34.846000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:34.864024 systemd-logind[1110]: New session 19 of user core. Oct 2 19:09:34.864210 systemd[1]: Started session-19.scope. Oct 2 19:09:34.869000 audit[3750]: USER_START pid=3750 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:34.871000 audit[3752]: CRED_ACQ pid=3752 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:34.879443 kernel: audit: type=1105 audit(1696273774.869:1347): pid=3750 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:34.879682 kernel: audit: type=1103 audit(1696273774.871:1348): pid=3752 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:35.056426 sshd[3750]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:35.059000 audit[3750]: USER_END pid=3750 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:35.064800 systemd[1]: sshd@18-10.0.0.35:22-10.0.0.1:48810.service: Deactivated successfully. Oct 2 19:09:35.065928 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:09:35.071302 kernel: audit: type=1106 audit(1696273775.059:1349): pid=3750 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:35.071492 kernel: audit: type=1104 audit(1696273775.060:1350): pid=3750 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:35.060000 audit[3750]: CRED_DISP pid=3750 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:35.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.35:22-10.0.0.1:48810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:35.066923 systemd-logind[1110]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:09:35.068279 systemd-logind[1110]: Removed session 19. Oct 2 19:09:38.615968 kubelet[2034]: I1002 19:09:38.615909 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:38.615968 kubelet[2034]: I1002 19:09:38.615982 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:09:38.619564 kubelet[2034]: I1002 19:09:38.619510 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:09:38.642310 kubelet[2034]: I1002 19:09:38.642255 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:38.642514 kubelet[2034]: I1002 19:09:38.642414 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:09:38.642514 kubelet[2034]: E1002 19:09:38.642452 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:09:38.642514 kubelet[2034]: E1002 19:09:38.642467 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:09:38.642514 kubelet[2034]: E1002 19:09:38.642479 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:09:38.642514 kubelet[2034]: E1002 19:09:38.642489 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:09:38.642514 kubelet[2034]: E1002 19:09:38.642499 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:09:38.642514 kubelet[2034]: E1002 19:09:38.642508 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:09:38.642722 kubelet[2034]: E1002 19:09:38.642519 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:09:38.642722 kubelet[2034]: I1002 19:09:38.642532 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:09:40.405447 kubelet[2034]: E1002 19:09:40.405385 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:42.407269 kubelet[2034]: E1002 19:09:42.407227 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:09:45.060265 systemd[1]: Started sshd@19-10.0.0.35:22-10.0.0.1:42504.service. Oct 2 19:09:45.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.35:22-10.0.0.1:42504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:45.101301 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:09:45.101456 kernel: audit: type=1130 audit(1696273785.058:1352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.35:22-10.0.0.1:42504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:45.128000 audit[3789]: USER_ACCT pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.130178 sshd[3789]: Accepted publickey for core from 10.0.0.1 port 42504 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:09:45.132349 sshd[3789]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:45.130000 audit[3789]: CRED_ACQ pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.135751 kernel: audit: type=1101 audit(1696273785.128:1353): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.135816 kernel: audit: type=1103 audit(1696273785.130:1354): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.135845 kernel: audit: type=1006 audit(1696273785.130:1355): pid=3789 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:09:45.136255 systemd-logind[1110]: New session 20 of user core. Oct 2 19:09:45.137022 systemd[1]: Started session-20.scope. Oct 2 19:09:45.137895 kernel: audit: type=1300 audit(1696273785.130:1355): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcab81e750 a2=3 a3=0 items=0 ppid=1 pid=3789 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:45.130000 audit[3789]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcab81e750 a2=3 a3=0 items=0 ppid=1 pid=3789 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:45.130000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:45.142151 kernel: audit: type=1327 audit(1696273785.130:1355): proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:45.142222 kernel: audit: type=1105 audit(1696273785.139:1356): pid=3789 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.139000 audit[3789]: USER_START pid=3789 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.144947 kernel: audit: type=1103 audit(1696273785.141:1357): pid=3791 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.141000 audit[3791]: CRED_ACQ pid=3791 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.258026 sshd[3789]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:45.257000 audit[3789]: USER_END pid=3789 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.261889 kernel: audit: type=1106 audit(1696273785.257:1358): pid=3789 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.260000 audit[3789]: CRED_DISP pid=3789 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.263380 systemd[1]: sshd@19-10.0.0.35:22-10.0.0.1:42504.service: Deactivated successfully. Oct 2 19:09:45.264145 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:09:45.265100 systemd-logind[1110]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:09:45.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.35:22-10.0.0.1:42504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:45.265884 kernel: audit: type=1104 audit(1696273785.260:1359): pid=3789 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:45.265950 systemd-logind[1110]: Removed session 20. Oct 2 19:09:48.662408 kubelet[2034]: I1002 19:09:48.662357 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:48.662408 kubelet[2034]: I1002 19:09:48.662405 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:09:48.664639 kubelet[2034]: I1002 19:09:48.664608 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:09:48.683653 kubelet[2034]: I1002 19:09:48.683609 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:48.683816 kubelet[2034]: I1002 19:09:48.683767 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:09:48.683816 kubelet[2034]: E1002 19:09:48.683807 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:09:48.683943 kubelet[2034]: E1002 19:09:48.683825 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:09:48.683943 kubelet[2034]: E1002 19:09:48.683840 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:09:48.683943 kubelet[2034]: E1002 19:09:48.683869 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:09:48.683943 kubelet[2034]: E1002 19:09:48.683886 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:09:48.683943 kubelet[2034]: E1002 19:09:48.683898 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:09:48.683943 kubelet[2034]: E1002 19:09:48.683910 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:09:48.683943 kubelet[2034]: I1002 19:09:48.683924 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:09:53.406994 env[1122]: time="2023-10-02T19:09:53.406843800Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:09:53.659258 env[1122]: time="2023-10-02T19:09:53.659043986Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:09:53.757158 env[1122]: time="2023-10-02T19:09:53.757046084Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:09:53.757537 kubelet[2034]: E1002 19:09:53.757468 2034 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:09:53.757537 kubelet[2034]: E1002 19:09:53.757531 2034 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:09:53.758127 kubelet[2034]: E1002 19:09:53.757719 2034 kuberuntime_manager.go:1209] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-ctgt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:09:53.758551 env[1122]: time="2023-10-02T19:09:53.758522432Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:09:54.010114 env[1122]: time="2023-10-02T19:09:54.010033957Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:09:54.091367 env[1122]: time="2023-10-02T19:09:54.091273170Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:09:54.091729 kubelet[2034]: E1002 19:09:54.091688 2034 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:09:54.091834 kubelet[2034]: E1002 19:09:54.091747 2034 kuberuntime_image.go:53] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:09:54.091922 kubelet[2034]: E1002 19:09:54.091891 2034 kuberuntime_manager.go:1209] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ctgt8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-j28n9_calico-system(6227d699-f00d-44ab-8bb0-9c81a862cbbf): ErrImagePull: failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:09:54.092052 kubelet[2034]: E1002 19:09:54.092002 2034 pod_workers.go:1300] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-j28n9" podUID="6227d699-f00d-44ab-8bb0-9c81a862cbbf" Oct 2 19:09:55.263112 systemd[1]: Started sshd@20-10.0.0.35:22-10.0.0.1:53706.service. Oct 2 19:09:55.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.35:22-10.0.0.1:53706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:55.264645 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:09:55.264765 kernel: audit: type=1130 audit(1696273795.262:1361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.35:22-10.0.0.1:53706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:55.363000 audit[3827]: USER_ACCT pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.365189 sshd[3827]: Accepted publickey for core from 10.0.0.1 port 53706 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:09:55.366000 audit[3827]: CRED_ACQ pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.368166 sshd[3827]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:55.370102 kernel: audit: type=1101 audit(1696273795.363:1362): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.370167 kernel: audit: type=1103 audit(1696273795.366:1363): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.370197 kernel: audit: type=1006 audit(1696273795.366:1364): pid=3827 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:09:55.371659 kernel: audit: type=1300 audit(1696273795.366:1364): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff26e7b120 a2=3 a3=0 items=0 ppid=1 pid=3827 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:55.366000 audit[3827]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff26e7b120 a2=3 a3=0 items=0 ppid=1 pid=3827 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:55.366000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:55.375374 kernel: audit: type=1327 audit(1696273795.366:1364): proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:55.388896 systemd-logind[1110]: New session 21 of user core. Oct 2 19:09:55.389768 systemd[1]: Started session-21.scope. Oct 2 19:09:55.393000 audit[3827]: USER_START pid=3827 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.395000 audit[3829]: CRED_ACQ pid=3829 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.409900 kernel: audit: type=1105 audit(1696273795.393:1365): pid=3827 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.409967 kernel: audit: type=1103 audit(1696273795.395:1366): pid=3829 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.670446 sshd[3827]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:55.670000 audit[3827]: USER_END pid=3827 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.673551 systemd[1]: sshd@20-10.0.0.35:22-10.0.0.1:53706.service: Deactivated successfully. Oct 2 19:09:55.674252 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:09:55.670000 audit[3827]: CRED_DISP pid=3827 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.674880 systemd-logind[1110]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:09:55.675622 systemd-logind[1110]: Removed session 21. Oct 2 19:09:55.676963 kernel: audit: type=1106 audit(1696273795.670:1367): pid=3827 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.677019 kernel: audit: type=1104 audit(1696273795.670:1368): pid=3827 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:09:55.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.35:22-10.0.0.1:53706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:57.406251 kubelet[2034]: E1002 19:09:57.406206 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:09:58.703396 kubelet[2034]: I1002 19:09:58.702589 2034 eviction_manager.go:342] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:58.703396 kubelet[2034]: I1002 19:09:58.702641 2034 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:09:58.707326 kubelet[2034]: I1002 19:09:58.707291 2034 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 19:09:58.724717 kubelet[2034]: I1002 19:09:58.724666 2034 eviction_manager.go:353] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:09:58.724945 kubelet[2034]: I1002 19:09:58.724832 2034 eviction_manager.go:371] "Eviction manager: pods ranked for eviction" pods=["calico-system/csi-node-driver-j28n9","calico-system/calico-typha-67cdbcd9d5-tsxl7","calico-system/calico-node-46wdb","kube-system/kube-controller-manager-localhost","kube-system/kube-proxy-67jl5","kube-system/kube-apiserver-localhost","kube-system/kube-scheduler-localhost"] Oct 2 19:09:58.724945 kubelet[2034]: E1002 19:09:58.724888 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/csi-node-driver-j28n9" Oct 2 19:09:58.724945 kubelet[2034]: E1002 19:09:58.724904 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-typha-67cdbcd9d5-tsxl7" Oct 2 19:09:58.724945 kubelet[2034]: E1002 19:09:58.724914 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="calico-system/calico-node-46wdb" Oct 2 19:09:58.724945 kubelet[2034]: E1002 19:09:58.724926 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:09:58.724945 kubelet[2034]: E1002 19:09:58.724936 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-67jl5" Oct 2 19:09:58.724945 kubelet[2034]: E1002 19:09:58.724947 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:09:58.725236 kubelet[2034]: E1002 19:09:58.724958 2034 eviction_manager.go:574] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:09:58.725236 kubelet[2034]: I1002 19:09:58.724972 2034 eviction_manager.go:403] "Eviction manager: unable to evict any pods from the node" Oct 2 19:10:00.405554 kubelet[2034]: E1002 19:10:00.405498 2034 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:10:05.675458 systemd[1]: Started sshd@21-10.0.0.35:22-10.0.0.1:53386.service. Oct 2 19:10:05.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.35:22-10.0.0.1:53386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:05.676946 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:10:05.677090 kernel: audit: type=1130 audit(1696273805.674:1370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.35:22-10.0.0.1:53386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:05.793000 audit[3870]: USER_ACCT pid=3870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.794649 sshd[3870]: Accepted publickey for core from 10.0.0.1 port 53386 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:10:05.796377 sshd[3870]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:05.794000 audit[3870]: CRED_ACQ pid=3870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.800567 kernel: audit: type=1101 audit(1696273805.793:1371): pid=3870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.800663 kernel: audit: type=1103 audit(1696273805.794:1372): pid=3870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.801635 systemd[1]: Started session-22.scope. Oct 2 19:10:05.802869 kernel: audit: type=1006 audit(1696273805.794:1373): pid=3870 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:10:05.802838 systemd-logind[1110]: New session 22 of user core. Oct 2 19:10:05.794000 audit[3870]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe23a2f900 a2=3 a3=0 items=0 ppid=1 pid=3870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:05.806814 kernel: audit: type=1300 audit(1696273805.794:1373): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe23a2f900 a2=3 a3=0 items=0 ppid=1 pid=3870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:05.794000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:05.807000 audit[3870]: USER_START pid=3870 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.812702 kernel: audit: type=1327 audit(1696273805.794:1373): proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:05.812789 kernel: audit: type=1105 audit(1696273805.807:1374): pid=3870 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.812844 kernel: audit: type=1103 audit(1696273805.809:1375): pid=3872 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.809000 audit[3872]: CRED_ACQ pid=3872 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.937830 sshd[3870]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:05.939000 audit[3870]: USER_END pid=3870 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.943039 systemd-logind[1110]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:10:05.943328 systemd[1]: sshd@21-10.0.0.35:22-10.0.0.1:53386.service: Deactivated successfully. Oct 2 19:10:05.944282 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:10:05.939000 audit[3870]: CRED_DISP pid=3870 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.945159 systemd-logind[1110]: Removed session 22. Oct 2 19:10:05.948027 kernel: audit: type=1106 audit(1696273805.939:1376): pid=3870 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.948098 kernel: audit: type=1104 audit(1696273805.939:1377): pid=3870 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:10:05.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.35:22-10.0.0.1:53386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'