Oct 2 19:31:15.790729 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:31:15.790754 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:31:15.790765 kernel: BIOS-provided physical RAM map: Oct 2 19:31:15.790772 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:31:15.790779 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:31:15.790787 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:31:15.790796 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdcfff] usable Oct 2 19:31:15.790804 kernel: BIOS-e820: [mem 0x000000009cfdd000-0x000000009cffffff] reserved Oct 2 19:31:15.790814 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:31:15.790821 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:31:15.790830 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Oct 2 19:31:15.790837 kernel: NX (Execute Disable) protection: active Oct 2 19:31:15.790845 kernel: SMBIOS 2.8 present. Oct 2 19:31:15.790853 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Oct 2 19:31:15.790867 kernel: Hypervisor detected: KVM Oct 2 19:31:15.790877 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:31:15.790887 kernel: kvm-clock: cpu 0, msr 83f8a001, primary cpu clock Oct 2 19:31:15.790895 kernel: kvm-clock: using sched offset of 2101382372 cycles Oct 2 19:31:15.790904 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:31:15.790913 kernel: tsc: Detected 2794.748 MHz processor Oct 2 19:31:15.790922 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:31:15.790931 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:31:15.790940 kernel: last_pfn = 0x9cfdd max_arch_pfn = 0x400000000 Oct 2 19:31:15.790950 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:31:15.790959 kernel: Using GB pages for direct mapping Oct 2 19:31:15.790968 kernel: ACPI: Early table checksum verification disabled Oct 2 19:31:15.790976 kernel: ACPI: RSDP 0x00000000000F59C0 000014 (v00 BOCHS ) Oct 2 19:31:15.790984 kernel: ACPI: RSDT 0x000000009CFE1BDD 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:31:15.790993 kernel: ACPI: FACP 0x000000009CFE1A79 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:31:15.791009 kernel: ACPI: DSDT 0x000000009CFE0040 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:31:15.791017 kernel: ACPI: FACS 0x000000009CFE0000 000040 Oct 2 19:31:15.791026 kernel: ACPI: APIC 0x000000009CFE1AED 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:31:15.791037 kernel: ACPI: HPET 0x000000009CFE1B7D 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:31:15.791046 kernel: ACPI: WAET 0x000000009CFE1BB5 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:31:15.791055 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe1a79-0x9cfe1aec] Oct 2 19:31:15.791063 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe1a78] Oct 2 19:31:15.791072 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Oct 2 19:31:15.791081 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe1aed-0x9cfe1b7c] Oct 2 19:31:15.791089 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe1b7d-0x9cfe1bb4] Oct 2 19:31:15.791098 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe1bb5-0x9cfe1bdc] Oct 2 19:31:15.791112 kernel: No NUMA configuration found Oct 2 19:31:15.791121 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdcfff] Oct 2 19:31:15.791131 kernel: NODE_DATA(0) allocated [mem 0x9cfd7000-0x9cfdcfff] Oct 2 19:31:15.791140 kernel: Zone ranges: Oct 2 19:31:15.791150 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:31:15.791159 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdcfff] Oct 2 19:31:15.791170 kernel: Normal empty Oct 2 19:31:15.791179 kernel: Movable zone start for each node Oct 2 19:31:15.791187 kernel: Early memory node ranges Oct 2 19:31:15.791196 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:31:15.791205 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdcfff] Oct 2 19:31:15.791214 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdcfff] Oct 2 19:31:15.791223 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:31:15.791232 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:31:15.791242 kernel: On node 0, zone DMA32: 12323 pages in unavailable ranges Oct 2 19:31:15.791253 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:31:15.791262 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:31:15.791272 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:31:15.791281 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:31:15.791290 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:31:15.791300 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:31:15.791309 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:31:15.791318 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:31:15.791327 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:31:15.791338 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:31:15.791347 kernel: TSC deadline timer available Oct 2 19:31:15.791357 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 2 19:31:15.791366 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 2 19:31:15.791375 kernel: kvm-guest: setup PV sched yield Oct 2 19:31:15.791383 kernel: [mem 0x9d000000-0xfeffbfff] available for PCI devices Oct 2 19:31:15.791392 kernel: Booting paravirtualized kernel on KVM Oct 2 19:31:15.791401 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:31:15.791411 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 2 19:31:15.791422 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Oct 2 19:31:15.791431 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Oct 2 19:31:15.791440 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 2 19:31:15.791449 kernel: kvm-guest: setup async PF for cpu 0 Oct 2 19:31:15.791458 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Oct 2 19:31:15.791467 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:31:15.791477 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:31:15.791486 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632733 Oct 2 19:31:15.791495 kernel: Policy zone: DMA32 Oct 2 19:31:15.791506 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:31:15.791518 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:31:15.791527 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:31:15.791537 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:31:15.791546 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:31:15.791556 kernel: Memory: 2438768K/2571756K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 132728K reserved, 0K cma-reserved) Oct 2 19:31:15.791566 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:31:15.791575 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:31:15.791584 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:31:15.791604 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:31:15.791615 kernel: rcu: RCU event tracing is enabled. Oct 2 19:31:15.791624 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:31:15.791633 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:31:15.791643 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:31:15.791652 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:31:15.791662 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:31:15.791671 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 2 19:31:15.791680 kernel: random: crng init done Oct 2 19:31:15.791692 kernel: Console: colour VGA+ 80x25 Oct 2 19:31:15.791701 kernel: printk: console [ttyS0] enabled Oct 2 19:31:15.791710 kernel: ACPI: Core revision 20210730 Oct 2 19:31:15.791720 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 2 19:31:15.791730 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:31:15.791739 kernel: x2apic enabled Oct 2 19:31:15.791748 kernel: Switched APIC routing to physical x2apic. Oct 2 19:31:15.791757 kernel: kvm-guest: setup PV IPIs Oct 2 19:31:15.791767 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:31:15.791778 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:31:15.791787 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 2 19:31:15.791796 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 2 19:31:15.791805 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 2 19:31:15.791814 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 2 19:31:15.791824 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:31:15.791833 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:31:15.791843 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:31:15.791853 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:31:15.791870 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 2 19:31:15.791880 kernel: RETBleed: Mitigation: untrained return thunk Oct 2 19:31:15.791890 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:31:15.791901 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:31:15.791911 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:31:15.791921 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:31:15.791931 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:31:15.791941 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:31:15.791951 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 2 19:31:15.791963 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:31:15.791972 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:31:15.791982 kernel: LSM: Security Framework initializing Oct 2 19:31:15.791990 kernel: SELinux: Initializing. Oct 2 19:31:15.792008 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:31:15.792018 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:31:15.792028 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 2 19:31:15.792040 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 2 19:31:15.792050 kernel: ... version: 0 Oct 2 19:31:15.792059 kernel: ... bit width: 48 Oct 2 19:31:15.792069 kernel: ... generic registers: 6 Oct 2 19:31:15.792079 kernel: ... value mask: 0000ffffffffffff Oct 2 19:31:15.792089 kernel: ... max period: 00007fffffffffff Oct 2 19:31:15.792099 kernel: ... fixed-purpose events: 0 Oct 2 19:31:15.792109 kernel: ... event mask: 000000000000003f Oct 2 19:31:15.792118 kernel: signal: max sigframe size: 1776 Oct 2 19:31:15.792130 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:31:15.792140 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:31:15.792150 kernel: x86: Booting SMP configuration: Oct 2 19:31:15.792159 kernel: .... node #0, CPUs: #1 Oct 2 19:31:15.792169 kernel: kvm-clock: cpu 1, msr 83f8a041, secondary cpu clock Oct 2 19:31:15.792178 kernel: kvm-guest: setup async PF for cpu 1 Oct 2 19:31:15.792188 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Oct 2 19:31:15.792197 kernel: #2 Oct 2 19:31:15.792206 kernel: kvm-clock: cpu 2, msr 83f8a081, secondary cpu clock Oct 2 19:31:15.792215 kernel: kvm-guest: setup async PF for cpu 2 Oct 2 19:31:15.792226 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Oct 2 19:31:15.792235 kernel: #3 Oct 2 19:31:15.792244 kernel: kvm-clock: cpu 3, msr 83f8a0c1, secondary cpu clock Oct 2 19:31:15.792253 kernel: kvm-guest: setup async PF for cpu 3 Oct 2 19:31:15.792262 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Oct 2 19:31:15.792271 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:31:15.792280 kernel: smpboot: Max logical packages: 1 Oct 2 19:31:15.792289 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 2 19:31:15.792298 kernel: devtmpfs: initialized Oct 2 19:31:15.792309 kernel: x86/mm: Memory block size: 128MB Oct 2 19:31:15.792318 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:31:15.792327 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:31:15.792336 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:31:15.792346 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:31:15.792355 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:31:15.792364 kernel: audit: type=2000 audit(1696275075.208:1): state=initialized audit_enabled=0 res=1 Oct 2 19:31:15.792373 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:31:15.792382 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:31:15.792393 kernel: cpuidle: using governor menu Oct 2 19:31:15.792403 kernel: ACPI: bus type PCI registered Oct 2 19:31:15.792413 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:31:15.792422 kernel: dca service started, version 1.12.1 Oct 2 19:31:15.792432 kernel: PCI: Using configuration type 1 for base access Oct 2 19:31:15.792442 kernel: PCI: Using configuration type 1 for extended access Oct 2 19:31:15.792452 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:31:15.792462 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:31:15.792472 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:31:15.792483 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:31:15.792493 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:31:15.792503 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:31:15.792513 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:31:15.792522 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:31:15.792532 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:31:15.792542 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:31:15.792552 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:31:15.792562 kernel: ACPI: Interpreter enabled Oct 2 19:31:15.792573 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:31:15.792582 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:31:15.792591 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:31:15.792612 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:31:15.792622 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:31:15.792788 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:31:15.792805 kernel: acpiphp: Slot [3] registered Oct 2 19:31:15.792815 kernel: acpiphp: Slot [4] registered Oct 2 19:31:15.792824 kernel: acpiphp: Slot [5] registered Oct 2 19:31:15.792835 kernel: acpiphp: Slot [6] registered Oct 2 19:31:15.792844 kernel: acpiphp: Slot [7] registered Oct 2 19:31:15.792853 kernel: acpiphp: Slot [8] registered Oct 2 19:31:15.792862 kernel: acpiphp: Slot [9] registered Oct 2 19:31:15.792871 kernel: acpiphp: Slot [10] registered Oct 2 19:31:15.792880 kernel: acpiphp: Slot [11] registered Oct 2 19:31:15.792890 kernel: acpiphp: Slot [12] registered Oct 2 19:31:15.792899 kernel: acpiphp: Slot [13] registered Oct 2 19:31:15.792908 kernel: acpiphp: Slot [14] registered Oct 2 19:31:15.792920 kernel: acpiphp: Slot [15] registered Oct 2 19:31:15.792929 kernel: acpiphp: Slot [16] registered Oct 2 19:31:15.792938 kernel: acpiphp: Slot [17] registered Oct 2 19:31:15.792947 kernel: acpiphp: Slot [18] registered Oct 2 19:31:15.792955 kernel: acpiphp: Slot [19] registered Oct 2 19:31:15.792964 kernel: acpiphp: Slot [20] registered Oct 2 19:31:15.792972 kernel: acpiphp: Slot [21] registered Oct 2 19:31:15.792981 kernel: acpiphp: Slot [22] registered Oct 2 19:31:15.792989 kernel: acpiphp: Slot [23] registered Oct 2 19:31:15.793005 kernel: acpiphp: Slot [24] registered Oct 2 19:31:15.793017 kernel: acpiphp: Slot [25] registered Oct 2 19:31:15.793027 kernel: acpiphp: Slot [26] registered Oct 2 19:31:15.793036 kernel: acpiphp: Slot [27] registered Oct 2 19:31:15.793044 kernel: acpiphp: Slot [28] registered Oct 2 19:31:15.793053 kernel: acpiphp: Slot [29] registered Oct 2 19:31:15.793062 kernel: acpiphp: Slot [30] registered Oct 2 19:31:15.793071 kernel: acpiphp: Slot [31] registered Oct 2 19:31:15.793080 kernel: PCI host bridge to bus 0000:00 Oct 2 19:31:15.793185 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:31:15.793281 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:31:15.793373 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:31:15.793465 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Oct 2 19:31:15.793555 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:31:15.793675 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:31:15.793810 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:31:15.793927 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:31:15.794051 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:31:15.794149 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Oct 2 19:31:15.794245 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:31:15.794343 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:31:15.794441 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:31:15.794533 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:31:15.794647 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:31:15.794740 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:31:15.794831 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:31:15.794937 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Oct 2 19:31:15.795038 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Oct 2 19:31:15.795130 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Oct 2 19:31:15.795226 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Oct 2 19:31:15.795318 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:31:15.795423 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:31:15.795517 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Oct 2 19:31:15.795635 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Oct 2 19:31:15.795730 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Oct 2 19:31:15.795829 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:31:15.795923 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:31:15.796031 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Oct 2 19:31:15.796130 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Oct 2 19:31:15.796236 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:31:15.796336 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Oct 2 19:31:15.796438 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Oct 2 19:31:15.796539 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Oct 2 19:31:15.796671 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Oct 2 19:31:15.796686 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:31:15.796697 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:31:15.796706 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:31:15.796716 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:31:15.796725 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:31:15.796734 kernel: iommu: Default domain type: Translated Oct 2 19:31:15.796744 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:31:15.796844 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:31:15.796950 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:31:15.797056 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:31:15.797069 kernel: vgaarb: loaded Oct 2 19:31:15.797079 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:31:15.797089 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:31:15.797098 kernel: PTP clock support registered Oct 2 19:31:15.797108 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:31:15.797117 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:31:15.797130 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:31:15.797140 kernel: e820: reserve RAM buffer [mem 0x9cfdd000-0x9fffffff] Oct 2 19:31:15.797150 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 2 19:31:15.797159 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 2 19:31:15.797168 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:31:15.797177 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:31:15.797187 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:31:15.797195 kernel: pnp: PnP ACPI init Oct 2 19:31:15.797308 kernel: pnp 00:02: [dma 2] Oct 2 19:31:15.797325 kernel: pnp: PnP ACPI: found 6 devices Oct 2 19:31:15.797334 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:31:15.797344 kernel: NET: Registered PF_INET protocol family Oct 2 19:31:15.797353 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:31:15.797362 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:31:15.797372 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:31:15.797381 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:31:15.797390 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:31:15.797402 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:31:15.797412 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:31:15.797421 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:31:15.797430 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:31:15.797440 kernel: NET: Registered PF_XDP protocol family Oct 2 19:31:15.797528 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:31:15.797627 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:31:15.797718 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:31:15.797804 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Oct 2 19:31:15.797892 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:31:15.798006 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:31:15.798105 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:31:15.798205 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:31:15.798219 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:31:15.798229 kernel: Initialise system trusted keyrings Oct 2 19:31:15.798239 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:31:15.798249 kernel: Key type asymmetric registered Oct 2 19:31:15.798262 kernel: Asymmetric key parser 'x509' registered Oct 2 19:31:15.798271 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:31:15.798281 kernel: io scheduler mq-deadline registered Oct 2 19:31:15.798291 kernel: io scheduler kyber registered Oct 2 19:31:15.798300 kernel: io scheduler bfq registered Oct 2 19:31:15.798310 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:31:15.798320 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:31:15.798330 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Oct 2 19:31:15.798340 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:31:15.798352 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:31:15.798362 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:31:15.798372 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:31:15.798382 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:31:15.798392 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:31:15.798402 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:31:15.798502 kernel: rtc_cmos 00:05: RTC can wake from S4 Oct 2 19:31:15.798616 kernel: rtc_cmos 00:05: registered as rtc0 Oct 2 19:31:15.798713 kernel: rtc_cmos 00:05: setting system clock to 2023-10-02T19:31:15 UTC (1696275075) Oct 2 19:31:15.798802 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 2 19:31:15.798817 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:31:15.798827 kernel: Segment Routing with IPv6 Oct 2 19:31:15.798837 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:31:15.798846 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:31:15.798856 kernel: Key type dns_resolver registered Oct 2 19:31:15.798866 kernel: IPI shorthand broadcast: enabled Oct 2 19:31:15.798876 kernel: sched_clock: Marking stable (361296937, 71783631)->(441025430, -7944862) Oct 2 19:31:15.798888 kernel: registered taskstats version 1 Oct 2 19:31:15.798897 kernel: Loading compiled-in X.509 certificates Oct 2 19:31:15.798907 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:31:15.798917 kernel: Key type .fscrypt registered Oct 2 19:31:15.798926 kernel: Key type fscrypt-provisioning registered Oct 2 19:31:15.798936 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:31:15.798945 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:31:15.798955 kernel: ima: No architecture policies found Oct 2 19:31:15.798965 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:31:15.798977 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:31:15.798987 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:31:15.799005 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:31:15.799015 kernel: Run /init as init process Oct 2 19:31:15.799025 kernel: with arguments: Oct 2 19:31:15.799034 kernel: /init Oct 2 19:31:15.799044 kernel: with environment: Oct 2 19:31:15.799066 kernel: HOME=/ Oct 2 19:31:15.799077 kernel: TERM=linux Oct 2 19:31:15.799089 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:31:15.799101 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:31:15.799114 systemd[1]: Detected virtualization kvm. Oct 2 19:31:15.799125 systemd[1]: Detected architecture x86-64. Oct 2 19:31:15.799136 systemd[1]: Running in initrd. Oct 2 19:31:15.799146 systemd[1]: No hostname configured, using default hostname. Oct 2 19:31:15.799157 systemd[1]: Hostname set to . Oct 2 19:31:15.799170 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:31:15.799181 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:31:15.799191 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:31:15.799202 systemd[1]: Reached target cryptsetup.target. Oct 2 19:31:15.799213 systemd[1]: Reached target paths.target. Oct 2 19:31:15.799224 systemd[1]: Reached target slices.target. Oct 2 19:31:15.799234 systemd[1]: Reached target swap.target. Oct 2 19:31:15.799245 systemd[1]: Reached target timers.target. Oct 2 19:31:15.799258 systemd[1]: Listening on iscsid.socket. Oct 2 19:31:15.799269 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:31:15.799280 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:31:15.799291 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:31:15.799301 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:31:15.799311 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:31:15.799321 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:31:15.799331 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:31:15.799343 systemd[1]: Reached target sockets.target. Oct 2 19:31:15.799353 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:31:15.799364 systemd[1]: Finished network-cleanup.service. Oct 2 19:31:15.799375 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:31:15.799386 systemd[1]: Starting systemd-journald.service... Oct 2 19:31:15.799397 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:31:15.799410 systemd[1]: Starting systemd-resolved.service... Oct 2 19:31:15.799422 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:31:15.799432 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:31:15.799443 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:31:15.799454 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:31:15.799469 systemd-journald[198]: Journal started Oct 2 19:31:15.799524 systemd-journald[198]: Runtime Journal (/run/log/journal/d71d418b1e5147279ac496a1a06f900d) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:31:15.785474 systemd-modules-load[199]: Inserted module 'overlay' Oct 2 19:31:15.812343 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:31:15.812369 kernel: Bridge firewalling registered Oct 2 19:31:15.812385 systemd[1]: Started systemd-journald.service. Oct 2 19:31:15.806912 systemd-modules-load[199]: Inserted module 'br_netfilter' Oct 2 19:31:15.813466 systemd-resolved[200]: Positive Trust Anchors: Oct 2 19:31:15.813477 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:31:15.813513 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:31:15.816439 systemd-resolved[200]: Defaulting to hostname 'linux'. Oct 2 19:31:15.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.820275 systemd[1]: Started systemd-resolved.service. Oct 2 19:31:15.822611 kernel: audit: type=1130 audit(1696275075.819:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.822627 kernel: SCSI subsystem initialized Oct 2 19:31:15.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.823635 kernel: audit: type=1130 audit(1696275075.822:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.823560 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:31:15.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.826573 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:31:15.829670 kernel: audit: type=1130 audit(1696275075.825:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.831611 kernel: audit: type=1130 audit(1696275075.829:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.829754 systemd[1]: Reached target nss-lookup.target. Oct 2 19:31:15.833269 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:31:15.835970 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:31:15.835983 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:31:15.835992 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:31:15.838234 systemd-modules-load[199]: Inserted module 'dm_multipath' Oct 2 19:31:15.838881 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:31:15.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.839755 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:31:15.842909 kernel: audit: type=1130 audit(1696275075.838:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.848898 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:31:15.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.851619 kernel: audit: type=1130 audit(1696275075.848:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.853814 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:31:15.856869 kernel: audit: type=1130 audit(1696275075.853:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.856890 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:31:15.865752 dracut-cmdline[221]: dracut-dracut-053 Oct 2 19:31:15.867593 dracut-cmdline[221]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:31:15.918626 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:31:15.929620 kernel: iscsi: registered transport (tcp) Oct 2 19:31:15.947625 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:31:15.947638 kernel: QLogic iSCSI HBA Driver Oct 2 19:31:15.973127 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:31:15.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:15.974122 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:31:15.976883 kernel: audit: type=1130 audit(1696275075.972:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:16.018617 kernel: raid6: avx2x4 gen() 30650 MB/s Oct 2 19:31:16.035613 kernel: raid6: avx2x4 xor() 8600 MB/s Oct 2 19:31:16.052612 kernel: raid6: avx2x2 gen() 32648 MB/s Oct 2 19:31:16.069612 kernel: raid6: avx2x2 xor() 19221 MB/s Oct 2 19:31:16.086625 kernel: raid6: avx2x1 gen() 26570 MB/s Oct 2 19:31:16.103622 kernel: raid6: avx2x1 xor() 15299 MB/s Oct 2 19:31:16.120624 kernel: raid6: sse2x4 gen() 14685 MB/s Oct 2 19:31:16.137621 kernel: raid6: sse2x4 xor() 7350 MB/s Oct 2 19:31:16.154632 kernel: raid6: sse2x2 gen() 16425 MB/s Oct 2 19:31:16.171641 kernel: raid6: sse2x2 xor() 9826 MB/s Oct 2 19:31:16.188623 kernel: raid6: sse2x1 gen() 12380 MB/s Oct 2 19:31:16.205977 kernel: raid6: sse2x1 xor() 7800 MB/s Oct 2 19:31:16.205998 kernel: raid6: using algorithm avx2x2 gen() 32648 MB/s Oct 2 19:31:16.206018 kernel: raid6: .... xor() 19221 MB/s, rmw enabled Oct 2 19:31:16.206026 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:31:16.217615 kernel: xor: automatically using best checksumming function avx Oct 2 19:31:16.304626 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:31:16.312907 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:31:16.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:16.315000 audit: BPF prog-id=7 op=LOAD Oct 2 19:31:16.315000 audit: BPF prog-id=8 op=LOAD Oct 2 19:31:16.316387 systemd[1]: Starting systemd-udevd.service... Oct 2 19:31:16.317348 kernel: audit: type=1130 audit(1696275076.312:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:16.328070 systemd-udevd[398]: Using default interface naming scheme 'v252'. Oct 2 19:31:16.331771 systemd[1]: Started systemd-udevd.service. Oct 2 19:31:16.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:16.332672 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:31:16.342511 dracut-pre-trigger[403]: rd.md=0: removing MD RAID activation Oct 2 19:31:16.366179 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:31:16.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:16.367972 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:31:16.398711 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:31:16.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:16.429626 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:31:16.431615 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:31:16.440629 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:31:16.440655 kernel: AES CTR mode by8 optimization enabled Oct 2 19:31:16.441619 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:31:16.458623 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (439) Oct 2 19:31:16.462753 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:31:16.478449 kernel: libata version 3.00 loaded. Oct 2 19:31:16.478473 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:31:16.479237 kernel: scsi host0: ata_piix Oct 2 19:31:16.479350 kernel: scsi host1: ata_piix Oct 2 19:31:16.479434 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Oct 2 19:31:16.479444 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Oct 2 19:31:16.478468 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:31:16.482164 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:31:16.488019 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:31:16.491555 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:31:16.492828 systemd[1]: Starting disk-uuid.service... Oct 2 19:31:16.501616 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:31:16.505616 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:31:16.626622 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 2 19:31:16.626669 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 2 19:31:16.654627 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 2 19:31:16.654821 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:31:16.671627 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Oct 2 19:31:17.508666 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:31:17.508959 disk-uuid[509]: The operation has completed successfully. Oct 2 19:31:17.531539 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:31:17.531670 systemd[1]: Finished disk-uuid.service. Oct 2 19:31:17.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.541549 systemd[1]: Starting verity-setup.service... Oct 2 19:31:17.555635 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:31:17.589396 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:31:17.590763 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:31:17.592834 systemd[1]: Finished verity-setup.service. Oct 2 19:31:17.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.664424 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:31:17.665312 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:31:17.665444 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:31:17.666136 systemd[1]: Starting ignition-setup.service... Oct 2 19:31:17.667326 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:31:17.673165 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:31:17.673188 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:31:17.673197 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:31:17.680889 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:31:17.688755 systemd[1]: Finished ignition-setup.service. Oct 2 19:31:17.689762 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:31:17.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.730111 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:31:17.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.731000 audit: BPF prog-id=9 op=LOAD Oct 2 19:31:17.731727 systemd[1]: Starting systemd-networkd.service... Oct 2 19:31:17.751356 systemd-networkd[688]: lo: Link UP Oct 2 19:31:17.751367 systemd-networkd[688]: lo: Gained carrier Oct 2 19:31:17.752623 systemd-networkd[688]: Enumeration completed Oct 2 19:31:17.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.752701 systemd[1]: Started systemd-networkd.service. Oct 2 19:31:17.752951 systemd[1]: Reached target network.target. Oct 2 19:31:17.754722 systemd-networkd[688]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:31:17.755573 systemd[1]: Starting iscsiuio.service... Oct 2 19:31:17.757521 systemd-networkd[688]: eth0: Link UP Oct 2 19:31:17.757528 systemd-networkd[688]: eth0: Gained carrier Oct 2 19:31:17.759205 systemd[1]: Started iscsiuio.service. Oct 2 19:31:17.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.760388 systemd[1]: Starting iscsid.service... Oct 2 19:31:17.763671 iscsid[693]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:31:17.763671 iscsid[693]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:31:17.763671 iscsid[693]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:31:17.763671 iscsid[693]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:31:17.763671 iscsid[693]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:31:17.763671 iscsid[693]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:31:17.771703 systemd[1]: Started iscsid.service. Oct 2 19:31:17.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.772556 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:31:17.780650 systemd-networkd[688]: eth0: DHCPv4 address 10.0.0.13/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:31:17.782793 ignition[603]: Ignition 2.14.0 Oct 2 19:31:17.782802 ignition[603]: Stage: fetch-offline Oct 2 19:31:17.782843 ignition[603]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:31:17.782852 ignition[603]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:31:17.782952 ignition[603]: parsed url from cmdline: "" Oct 2 19:31:17.782955 ignition[603]: no config URL provided Oct 2 19:31:17.782959 ignition[603]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:31:17.785834 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:31:17.782965 ignition[603]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:31:17.786484 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:31:17.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.782980 ignition[603]: op(1): [started] loading QEMU firmware config module Oct 2 19:31:17.786717 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:31:17.782987 ignition[603]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:31:17.786919 systemd[1]: Reached target remote-fs.target. Oct 2 19:31:17.787689 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:31:17.792683 ignition[603]: op(1): [finished] loading QEMU firmware config module Oct 2 19:31:17.794560 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:31:17.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.821062 ignition[603]: parsing config with SHA512: a3dae7c37cb3584ca1ae498d711e65bce67a82fe2c4c5a770aab35888c00b3e2c16c15e46df17bf564e42b33f54c80cb60292378009dd59ba831f9bcb4f01451 Oct 2 19:31:17.844866 unknown[603]: fetched base config from "system" Oct 2 19:31:17.845166 unknown[603]: fetched user config from "qemu" Oct 2 19:31:17.845757 ignition[603]: fetch-offline: fetch-offline passed Oct 2 19:31:17.845819 ignition[603]: Ignition finished successfully Oct 2 19:31:17.846811 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:31:17.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.847841 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:31:17.848493 systemd[1]: Starting ignition-kargs.service... Oct 2 19:31:17.856476 ignition[709]: Ignition 2.14.0 Oct 2 19:31:17.856484 ignition[709]: Stage: kargs Oct 2 19:31:17.856565 ignition[709]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:31:17.856574 ignition[709]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:31:17.857506 ignition[709]: kargs: kargs passed Oct 2 19:31:17.858778 systemd[1]: Finished ignition-kargs.service. Oct 2 19:31:17.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.857540 ignition[709]: Ignition finished successfully Oct 2 19:31:17.860256 systemd[1]: Starting ignition-disks.service... Oct 2 19:31:17.865877 ignition[715]: Ignition 2.14.0 Oct 2 19:31:17.865885 ignition[715]: Stage: disks Oct 2 19:31:17.865977 ignition[715]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:31:17.865986 ignition[715]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:31:17.868194 systemd[1]: Finished ignition-disks.service. Oct 2 19:31:17.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.866916 ignition[715]: disks: disks passed Oct 2 19:31:17.869390 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:31:17.866951 ignition[715]: Ignition finished successfully Oct 2 19:31:17.870338 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:31:17.870887 systemd[1]: Reached target local-fs.target. Oct 2 19:31:17.871772 systemd[1]: Reached target sysinit.target. Oct 2 19:31:17.872048 systemd[1]: Reached target basic.target. Oct 2 19:31:17.873062 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:31:17.881232 systemd-resolved[200]: Detected conflict on linux IN A 10.0.0.13 Oct 2 19:31:17.881249 systemd-resolved[200]: Hostname conflict, changing published hostname from 'linux' to 'linux8'. Oct 2 19:31:17.883679 systemd-fsck[723]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:31:17.888082 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:31:17.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.889024 systemd[1]: Mounting sysroot.mount... Oct 2 19:31:17.893615 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:31:17.894073 systemd[1]: Mounted sysroot.mount. Oct 2 19:31:17.894298 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:31:17.895846 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:31:17.896344 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:31:17.896370 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:31:17.896386 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:31:17.897765 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:31:17.899491 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:31:17.904921 initrd-setup-root[733]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:31:17.908586 initrd-setup-root[741]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:31:17.911755 initrd-setup-root[749]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:31:17.914885 initrd-setup-root[757]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:31:17.941636 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:31:17.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.943521 systemd[1]: Starting ignition-mount.service... Oct 2 19:31:17.944550 systemd[1]: Starting sysroot-boot.service... Oct 2 19:31:17.948456 bash[774]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:31:17.955961 ignition[775]: INFO : Ignition 2.14.0 Oct 2 19:31:17.955961 ignition[775]: INFO : Stage: mount Oct 2 19:31:17.957070 ignition[775]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:31:17.957070 ignition[775]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:31:17.957070 ignition[775]: INFO : mount: mount passed Oct 2 19:31:17.957070 ignition[775]: INFO : Ignition finished successfully Oct 2 19:31:17.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:17.958022 systemd[1]: Finished ignition-mount.service. Oct 2 19:31:17.963375 systemd[1]: Finished sysroot-boot.service. Oct 2 19:31:17.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:18.604352 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:31:18.610100 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (784) Oct 2 19:31:18.610126 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:31:18.610136 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:31:18.610646 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:31:18.614116 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:31:18.615841 systemd[1]: Starting ignition-files.service... Oct 2 19:31:18.627344 ignition[804]: INFO : Ignition 2.14.0 Oct 2 19:31:18.627344 ignition[804]: INFO : Stage: files Oct 2 19:31:18.628432 ignition[804]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:31:18.628432 ignition[804]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:31:18.629973 ignition[804]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:31:18.630742 ignition[804]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:31:18.630742 ignition[804]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:31:18.632583 ignition[804]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:31:18.632583 ignition[804]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:31:18.634340 ignition[804]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:31:18.634340 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:31:18.634340 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:31:18.632948 unknown[804]: wrote ssh authorized keys file for user: core Oct 2 19:31:18.835108 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:31:18.920786 systemd-networkd[688]: eth0: Gained IPv6LL Oct 2 19:31:18.961893 ignition[804]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:31:18.963731 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:31:18.963731 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:31:18.963731 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:31:19.069877 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:31:19.157292 ignition[804]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 19:31:19.159247 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:31:19.159247 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:31:19.159247 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:31:19.250922 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:31:19.971232 ignition[804]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 19:31:19.973907 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:31:19.973907 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:31:19.973907 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:31:20.037080 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:31:21.602812 ignition[804]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 19:31:21.605108 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:31:21.605108 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:31:21.605108 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:31:21.680981 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:31:22.562440 ignition[804]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 19:31:22.564619 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:31:22.564619 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:31:22.564619 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:31:22.564619 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:31:22.564619 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:31:22.662835 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:31:22.725226 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:31:22.725226 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:31:22.728351 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:31:22.728351 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:31:22.728351 ignition[804]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(c): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(c): op(d): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(c): op(d): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(c): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(e): [started] processing unit "prepare-critools.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(e): op(f): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(e): op(f): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(e): [finished] processing unit "prepare-critools.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(10): [started] processing unit "coreos-metadata.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(10): op(11): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(10): op(11): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(10): [finished] processing unit "coreos-metadata.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(12): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:31:22.728351 ignition[804]: INFO : files: op(12): op(13): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:31:22.779776 ignition[804]: INFO : files: op(12): op(13): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:31:22.781092 ignition[804]: INFO : files: op(12): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:31:22.781092 ignition[804]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:31:22.781092 ignition[804]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:31:22.781092 ignition[804]: INFO : files: op(15): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:31:22.781092 ignition[804]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:31:22.786412 ignition[804]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:31:22.787710 ignition[804]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:31:22.788974 ignition[804]: INFO : files: files passed Oct 2 19:31:22.789519 ignition[804]: INFO : Ignition finished successfully Oct 2 19:31:22.791079 systemd[1]: Finished ignition-files.service. Oct 2 19:31:22.794608 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:31:22.794632 kernel: audit: type=1130 audit(1696275082.790:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.794626 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:31:22.794942 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:31:22.795405 systemd[1]: Starting ignition-quench.service... Oct 2 19:31:22.802400 kernel: audit: type=1130 audit(1696275082.797:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.802419 kernel: audit: type=1131 audit(1696275082.797:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.797711 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:31:22.797773 systemd[1]: Finished ignition-quench.service. Oct 2 19:31:22.807239 initrd-setup-root-after-ignition[829]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:31:22.809441 initrd-setup-root-after-ignition[831]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:31:22.810877 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:31:22.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.812186 systemd[1]: Reached target ignition-complete.target. Oct 2 19:31:22.815298 kernel: audit: type=1130 audit(1696275082.811:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.814956 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:31:22.826074 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:31:22.826152 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:31:22.830753 kernel: audit: type=1130 audit(1696275082.825:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.830772 kernel: audit: type=1131 audit(1696275082.825:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.826638 systemd[1]: Reached target initrd-fs.target. Oct 2 19:31:22.831876 systemd[1]: Reached target initrd.target. Oct 2 19:31:22.832832 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:31:22.834234 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:31:22.843861 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:31:22.846715 kernel: audit: type=1130 audit(1696275082.843:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.846743 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:31:22.855860 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:31:22.856285 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:31:22.856535 systemd[1]: Stopped target timers.target. Oct 2 19:31:22.856893 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:31:22.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.861619 kernel: audit: type=1131 audit(1696275082.858:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.857011 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:31:22.859179 systemd[1]: Stopped target initrd.target. Oct 2 19:31:22.861962 systemd[1]: Stopped target basic.target. Oct 2 19:31:22.862206 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:31:22.862453 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:31:22.864612 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:31:22.865693 systemd[1]: Stopped target remote-fs.target. Oct 2 19:31:22.866859 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:31:22.867885 systemd[1]: Stopped target sysinit.target. Oct 2 19:31:22.868880 systemd[1]: Stopped target local-fs.target. Oct 2 19:31:22.869880 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:31:22.870118 systemd[1]: Stopped target swap.target. Oct 2 19:31:22.874899 kernel: audit: type=1131 audit(1696275082.871:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.870332 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:31:22.870445 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:31:22.878783 kernel: audit: type=1131 audit(1696275082.875:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.872537 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:31:22.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.875260 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:31:22.875373 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:31:22.876457 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:31:22.876550 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:31:22.879233 systemd[1]: Stopped target paths.target. Oct 2 19:31:22.880161 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:31:22.883676 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:31:22.884864 systemd[1]: Stopped target slices.target. Oct 2 19:31:22.885195 systemd[1]: Stopped target sockets.target. Oct 2 19:31:22.886071 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:31:22.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.886178 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:31:22.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.886959 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:31:22.887036 systemd[1]: Stopped ignition-files.service. Oct 2 19:31:22.890624 iscsid[693]: iscsid shutting down. Oct 2 19:31:22.888876 systemd[1]: Stopping ignition-mount.service... Oct 2 19:31:22.890730 systemd[1]: Stopping iscsid.service... Oct 2 19:31:22.892658 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:31:22.893495 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:31:22.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.895435 ignition[844]: INFO : Ignition 2.14.0 Oct 2 19:31:22.896135 ignition[844]: INFO : Stage: umount Oct 2 19:31:22.896135 ignition[844]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:31:22.896135 ignition[844]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:31:22.895592 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:31:22.897038 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:31:22.899278 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:31:22.901442 ignition[844]: INFO : umount: umount passed Oct 2 19:31:22.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.902158 ignition[844]: INFO : Ignition finished successfully Oct 2 19:31:22.902147 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:31:22.903779 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:31:22.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.907039 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:31:22.907772 systemd[1]: Stopped iscsid.service. Oct 2 19:31:22.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.909321 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:31:22.910007 systemd[1]: Stopped ignition-mount.service. Oct 2 19:31:22.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.912551 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:31:22.913615 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:31:22.914224 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:31:22.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.915445 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:31:22.916056 systemd[1]: Closed iscsid.socket. Oct 2 19:31:22.916919 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:31:22.916953 systemd[1]: Stopped ignition-disks.service. Oct 2 19:31:22.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.918424 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:31:22.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.918453 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:31:22.919543 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:31:22.919573 systemd[1]: Stopped ignition-setup.service. Oct 2 19:31:22.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.921386 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:31:22.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.921414 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:31:22.923102 systemd[1]: Stopping iscsiuio.service... Oct 2 19:31:22.924344 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:31:22.925111 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:31:22.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.926211 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:31:22.926819 systemd[1]: Stopped iscsiuio.service. Oct 2 19:31:22.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.928313 systemd[1]: Stopped target network.target. Oct 2 19:31:22.929277 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:31:22.929303 systemd[1]: Closed iscsiuio.socket. Oct 2 19:31:22.930755 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:31:22.931842 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:31:22.935640 systemd-networkd[688]: eth0: DHCPv6 lease lost Oct 2 19:31:22.936929 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:31:22.937558 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:31:22.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.939069 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:31:22.939097 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:31:22.941117 systemd[1]: Stopping network-cleanup.service... Oct 2 19:31:22.941000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:31:22.942409 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:31:22.942456 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:31:22.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.944089 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:31:22.944121 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:31:22.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.945764 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:31:22.945805 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:31:22.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.947526 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:31:22.949171 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:31:22.950272 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:31:22.950950 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:31:22.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.952622 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:31:22.953278 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:31:22.953000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.955070 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:31:22.955108 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:31:22.955000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:31:22.956840 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:31:22.956867 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:31:22.958008 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:31:22.958038 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:31:22.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.959567 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:31:22.960045 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:31:22.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.961118 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:31:22.961571 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:31:22.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.963670 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:31:22.964743 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:31:22.964779 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:31:22.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.966591 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:31:22.967244 systemd[1]: Stopped network-cleanup.service. Oct 2 19:31:22.967000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.968366 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:31:22.969066 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:31:22.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.969000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:22.970277 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:31:22.971918 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:31:22.987400 systemd[1]: Switching root. Oct 2 19:31:23.004787 systemd-journald[198]: Journal stopped Oct 2 19:31:27.640480 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Oct 2 19:31:27.640537 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:31:27.640555 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:31:27.640566 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:31:27.640577 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:31:27.640590 kernel: SELinux: policy capability open_perms=1 Oct 2 19:31:27.640624 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:31:27.640642 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:31:27.640659 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:31:27.640681 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:31:27.640694 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:31:27.640707 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:31:27.640724 systemd[1]: Successfully loaded SELinux policy in 36.438ms. Oct 2 19:31:27.640747 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.838ms. Oct 2 19:31:27.640765 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:31:27.640782 systemd[1]: Detected virtualization kvm. Oct 2 19:31:27.640797 systemd[1]: Detected architecture x86-64. Oct 2 19:31:27.640809 systemd[1]: Detected first boot. Oct 2 19:31:27.640824 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:31:27.640838 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:31:27.640854 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:31:27.640876 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:31:27.640892 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:31:27.640911 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:31:27.640925 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:31:27.640939 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:31:27.640953 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:31:27.640968 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:31:27.640986 systemd[1]: Created slice system-getty.slice. Oct 2 19:31:27.641004 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:31:27.641019 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:31:27.641036 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:31:27.641051 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:31:27.641067 systemd[1]: Created slice user.slice. Oct 2 19:31:27.641082 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:31:27.641096 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:31:27.641110 systemd[1]: Set up automount boot.automount. Oct 2 19:31:27.641124 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:31:27.641139 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:31:27.641154 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:31:27.641172 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:31:27.641187 systemd[1]: Reached target integritysetup.target. Oct 2 19:31:27.641205 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:31:27.641219 systemd[1]: Reached target remote-fs.target. Oct 2 19:31:27.641230 systemd[1]: Reached target slices.target. Oct 2 19:31:27.641243 systemd[1]: Reached target swap.target. Oct 2 19:31:27.641257 systemd[1]: Reached target torcx.target. Oct 2 19:31:27.641271 systemd[1]: Reached target veritysetup.target. Oct 2 19:31:27.641288 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:31:27.641299 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:31:27.641310 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:31:27.641325 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:31:27.641343 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:31:27.641358 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:31:27.641375 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:31:27.641389 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:31:27.641404 systemd[1]: Mounting media.mount... Oct 2 19:31:27.641417 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:31:27.641431 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:31:27.641446 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:31:27.641461 systemd[1]: Mounting tmp.mount... Oct 2 19:31:27.641476 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:31:27.641490 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:31:27.641505 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:31:27.641519 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:31:27.641533 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:31:27.641547 systemd[1]: Starting modprobe@drm.service... Oct 2 19:31:27.641566 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:31:27.641580 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:31:27.641613 systemd[1]: Starting modprobe@loop.service... Oct 2 19:31:27.641629 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:31:27.641644 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:31:27.641658 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:31:27.641682 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:31:27.641697 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:31:27.641710 systemd[1]: Stopped systemd-journald.service. Oct 2 19:31:27.641720 kernel: loop: module loaded Oct 2 19:31:27.641730 systemd[1]: Starting systemd-journald.service... Oct 2 19:31:27.641740 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:31:27.641750 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:31:27.641760 kernel: fuse: init (API version 7.34) Oct 2 19:31:27.641771 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:31:27.641781 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:31:27.641794 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:31:27.641809 systemd[1]: Stopped verity-setup.service. Oct 2 19:31:27.641822 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:31:27.641836 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:31:27.641850 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:31:27.641862 systemd[1]: Mounted media.mount. Oct 2 19:31:27.641871 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:31:27.641881 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:31:27.641891 systemd[1]: Mounted tmp.mount. Oct 2 19:31:27.641906 systemd-journald[946]: Journal started Oct 2 19:31:27.641949 systemd-journald[946]: Runtime Journal (/run/log/journal/d71d418b1e5147279ac496a1a06f900d) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:31:23.072000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:31:25.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:31:25.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:31:25.424000 audit: BPF prog-id=10 op=LOAD Oct 2 19:31:25.424000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:31:25.424000 audit: BPF prog-id=11 op=LOAD Oct 2 19:31:25.424000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:31:27.531000 audit: BPF prog-id=12 op=LOAD Oct 2 19:31:27.531000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:31:27.531000 audit: BPF prog-id=13 op=LOAD Oct 2 19:31:27.531000 audit: BPF prog-id=14 op=LOAD Oct 2 19:31:27.531000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:31:27.531000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:31:27.532000 audit: BPF prog-id=15 op=LOAD Oct 2 19:31:27.532000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:31:27.532000 audit: BPF prog-id=16 op=LOAD Oct 2 19:31:27.532000 audit: BPF prog-id=17 op=LOAD Oct 2 19:31:27.532000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:31:27.532000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:31:27.533000 audit: BPF prog-id=18 op=LOAD Oct 2 19:31:27.533000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:31:27.533000 audit: BPF prog-id=19 op=LOAD Oct 2 19:31:27.533000 audit: BPF prog-id=20 op=LOAD Oct 2 19:31:27.533000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:31:27.533000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:31:27.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.544000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:31:27.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.614000 audit: BPF prog-id=21 op=LOAD Oct 2 19:31:27.614000 audit: BPF prog-id=22 op=LOAD Oct 2 19:31:27.614000 audit: BPF prog-id=23 op=LOAD Oct 2 19:31:27.614000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:31:27.614000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:31:27.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.638000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:31:27.638000 audit[946]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffd9d01a660 a2=4000 a3=7ffd9d01a6fc items=0 ppid=1 pid=946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:27.638000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:31:25.481860 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:31:27.530857 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:31:25.482112 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:31:27.530868 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:31:25.482127 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:31:27.534525 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:31:25.482154 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:31:25.482162 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:31:25.482189 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:31:25.482199 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:31:27.643640 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:31:27.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:25.482394 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:31:25.482425 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:31:25.482435 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:31:25.482823 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:31:25.482861 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:31:25.482878 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:31:25.482890 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:31:25.482905 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:31:25.482918 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:31:27.270290 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:27Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:31:27.270637 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:27Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:31:27.644625 systemd[1]: Started systemd-journald.service. Oct 2 19:31:27.270770 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:27Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:31:27.270965 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:27Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:31:27.271021 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:27Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:31:27.271088 /usr/lib/systemd/system-generators/torcx-generator[877]: time="2023-10-02T19:31:27Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:31:27.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.646337 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:31:27.646514 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:31:27.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.647500 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:31:27.647680 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:31:27.648510 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:31:27.648699 systemd[1]: Finished modprobe@drm.service. Oct 2 19:31:27.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.649591 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:31:27.649748 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:31:27.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.650757 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:31:27.650919 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:31:27.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.651778 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:31:27.651922 systemd[1]: Finished modprobe@loop.service. Oct 2 19:31:27.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.653373 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:31:27.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.654473 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:31:27.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.655879 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:31:27.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.657171 systemd[1]: Reached target network-pre.target. Oct 2 19:31:27.658850 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:31:27.660526 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:31:27.661312 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:31:27.664193 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:31:27.665929 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:31:27.666819 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:31:27.667848 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:31:27.668735 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:31:27.669749 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:31:27.671558 systemd-journald[946]: Time spent on flushing to /var/log/journal/d71d418b1e5147279ac496a1a06f900d is 13.500ms for 1100 entries. Oct 2 19:31:27.671558 systemd-journald[946]: System Journal (/var/log/journal/d71d418b1e5147279ac496a1a06f900d) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:31:27.953869 systemd-journald[946]: Received client request to flush runtime journal. Oct 2 19:31:27.953986 kernel: kauditd_printk_skb: 94 callbacks suppressed Oct 2 19:31:27.954030 kernel: audit: type=1130 audit(1696275087.931:136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.673052 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:31:27.674132 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:31:27.954670 udevadm[981]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:31:27.674936 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:31:27.676453 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:31:27.685919 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:31:27.687864 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:31:27.692740 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:31:27.701105 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:31:27.931151 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:31:27.932008 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:31:27.955061 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:31:27.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:27.958630 kernel: audit: type=1130 audit(1696275087.955:137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.235981 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:31:28.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.238000 audit: BPF prog-id=24 op=LOAD Oct 2 19:31:28.238000 audit: BPF prog-id=25 op=LOAD Oct 2 19:31:28.240223 kernel: audit: type=1130 audit(1696275088.236:138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.240267 kernel: audit: type=1334 audit(1696275088.238:139): prog-id=24 op=LOAD Oct 2 19:31:28.240293 kernel: audit: type=1334 audit(1696275088.238:140): prog-id=25 op=LOAD Oct 2 19:31:28.240311 kernel: audit: type=1334 audit(1696275088.238:141): prog-id=7 op=UNLOAD Oct 2 19:31:28.238000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:31:28.240340 systemd[1]: Starting systemd-udevd.service... Oct 2 19:31:28.240858 kernel: audit: type=1334 audit(1696275088.239:142): prog-id=8 op=UNLOAD Oct 2 19:31:28.239000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:31:28.256090 systemd-udevd[983]: Using default interface naming scheme 'v252'. Oct 2 19:31:28.270628 systemd[1]: Started systemd-udevd.service. Oct 2 19:31:28.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.272000 audit: BPF prog-id=26 op=LOAD Oct 2 19:31:28.274068 systemd[1]: Starting systemd-networkd.service... Oct 2 19:31:28.274182 kernel: audit: type=1130 audit(1696275088.270:143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.274217 kernel: audit: type=1334 audit(1696275088.272:144): prog-id=26 op=LOAD Oct 2 19:31:28.280000 audit: BPF prog-id=27 op=LOAD Oct 2 19:31:28.280000 audit: BPF prog-id=28 op=LOAD Oct 2 19:31:28.280000 audit: BPF prog-id=29 op=LOAD Oct 2 19:31:28.281702 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:31:28.283661 kernel: audit: type=1334 audit(1696275088.280:145): prog-id=27 op=LOAD Oct 2 19:31:28.297795 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:31:28.319882 systemd[1]: Started systemd-userdbd.service. Oct 2 19:31:28.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.327494 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:31:28.352000 audit[991]: AVC avc: denied { confidentiality } for pid=991 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:31:28.352000 audit[991]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55e55796a1a0 a1=32194 a2=7f0082784bc5 a3=5 items=106 ppid=983 pid=991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:28.352000 audit: CWD cwd="/" Oct 2 19:31:28.352000 audit: PATH item=0 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=1 name=(null) inode=13283 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=2 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=3 name=(null) inode=13284 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=4 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=5 name=(null) inode=13285 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=6 name=(null) inode=13285 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=7 name=(null) inode=13286 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=8 name=(null) inode=13285 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=9 name=(null) inode=13287 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=10 name=(null) inode=13285 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=11 name=(null) inode=13288 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=12 name=(null) inode=13285 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=13 name=(null) inode=13289 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=14 name=(null) inode=13285 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=15 name=(null) inode=13290 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=16 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=17 name=(null) inode=13291 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=18 name=(null) inode=13291 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=19 name=(null) inode=13292 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=20 name=(null) inode=13291 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=21 name=(null) inode=13293 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=22 name=(null) inode=13291 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=23 name=(null) inode=13294 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=24 name=(null) inode=13291 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=25 name=(null) inode=13295 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=26 name=(null) inode=13291 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=27 name=(null) inode=13296 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=28 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=29 name=(null) inode=13297 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=30 name=(null) inode=13297 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=31 name=(null) inode=13298 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=32 name=(null) inode=13297 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=33 name=(null) inode=13299 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=34 name=(null) inode=13297 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=35 name=(null) inode=13300 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=36 name=(null) inode=13297 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=37 name=(null) inode=13301 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=38 name=(null) inode=13297 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=39 name=(null) inode=13302 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=40 name=(null) inode=13282 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=41 name=(null) inode=13303 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=42 name=(null) inode=13303 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=43 name=(null) inode=13304 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=44 name=(null) inode=13303 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=45 name=(null) inode=13305 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=46 name=(null) inode=13303 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=47 name=(null) inode=13306 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=48 name=(null) inode=13303 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=49 name=(null) inode=13307 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=50 name=(null) inode=13303 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=51 name=(null) inode=13308 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=52 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=53 name=(null) inode=13309 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=54 name=(null) inode=13309 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=55 name=(null) inode=13310 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=56 name=(null) inode=13309 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=57 name=(null) inode=13311 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=58 name=(null) inode=13309 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=59 name=(null) inode=13312 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=60 name=(null) inode=13312 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=61 name=(null) inode=16385 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=62 name=(null) inode=13312 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=63 name=(null) inode=16386 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=64 name=(null) inode=13312 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=65 name=(null) inode=16387 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=66 name=(null) inode=13312 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=67 name=(null) inode=16388 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=68 name=(null) inode=13312 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=69 name=(null) inode=16389 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=70 name=(null) inode=13309 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=71 name=(null) inode=16390 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=72 name=(null) inode=16390 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=73 name=(null) inode=16391 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.366618 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:31:28.352000 audit: PATH item=74 name=(null) inode=16390 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=75 name=(null) inode=16392 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=76 name=(null) inode=16390 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=77 name=(null) inode=16393 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=78 name=(null) inode=16390 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=79 name=(null) inode=16394 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=80 name=(null) inode=16390 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=81 name=(null) inode=16395 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=82 name=(null) inode=13309 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=83 name=(null) inode=16396 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=84 name=(null) inode=16396 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=85 name=(null) inode=16397 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=86 name=(null) inode=16396 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=87 name=(null) inode=16398 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=88 name=(null) inode=16396 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=89 name=(null) inode=16399 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=90 name=(null) inode=16396 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=91 name=(null) inode=16400 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=92 name=(null) inode=16396 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=93 name=(null) inode=16401 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=94 name=(null) inode=13309 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=95 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=96 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=97 name=(null) inode=16403 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=98 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=99 name=(null) inode=16404 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=100 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=101 name=(null) inode=16405 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=102 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=103 name=(null) inode=16406 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=104 name=(null) inode=16402 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PATH item=105 name=(null) inode=16407 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:31:28.352000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:31:28.396625 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:31:28.396867 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:31:28.402517 systemd-networkd[987]: lo: Link UP Oct 2 19:31:28.402528 systemd-networkd[987]: lo: Gained carrier Oct 2 19:31:28.402966 systemd-networkd[987]: Enumeration completed Oct 2 19:31:28.403058 systemd[1]: Started systemd-networkd.service. Oct 2 19:31:28.403073 systemd-networkd[987]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:31:28.404283 systemd-networkd[987]: eth0: Link UP Oct 2 19:31:28.404293 systemd-networkd[987]: eth0: Gained carrier Oct 2 19:31:28.417619 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:31:28.420618 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:31:28.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.436765 systemd-networkd[987]: eth0: DHCPv4 address 10.0.0.13/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:31:28.467630 kernel: kvm: Nested Virtualization enabled Oct 2 19:31:28.467790 kernel: SVM: kvm: Nested Paging enabled Oct 2 19:31:28.480621 kernel: EDAC MC: Ver: 3.0.0 Oct 2 19:31:28.498976 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:31:28.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.500760 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:31:28.517452 lvm[1019]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:31:28.544832 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:31:28.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.545764 systemd[1]: Reached target cryptsetup.target. Oct 2 19:31:28.547895 systemd[1]: Starting lvm2-activation.service... Oct 2 19:31:28.551321 lvm[1020]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:31:28.578765 systemd[1]: Finished lvm2-activation.service. Oct 2 19:31:28.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.579776 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:31:28.580556 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:31:28.580588 systemd[1]: Reached target local-fs.target. Oct 2 19:31:28.581308 systemd[1]: Reached target machines.target. Oct 2 19:31:28.583526 systemd[1]: Starting ldconfig.service... Oct 2 19:31:28.584624 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:31:28.584693 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:31:28.585728 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:31:28.587369 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:31:28.589394 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:31:28.590110 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:31:28.590148 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:31:28.591042 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:31:28.592146 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1022 (bootctl) Oct 2 19:31:28.593359 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:31:28.599755 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:31:28.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.612719 systemd-tmpfiles[1025]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:31:28.620683 systemd-tmpfiles[1025]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:31:28.626570 systemd-tmpfiles[1025]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:31:28.636559 systemd-fsck[1030]: fsck.fat 4.2 (2021-01-31) Oct 2 19:31:28.636559 systemd-fsck[1030]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:31:28.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:28.638106 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:31:28.640242 systemd[1]: Mounting boot.mount... Oct 2 19:31:29.364327 systemd[1]: Mounted boot.mount. Oct 2 19:31:29.374612 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:31:29.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:29.413276 ldconfig[1021]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:31:29.426302 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:31:29.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:29.428030 systemd[1]: Starting audit-rules.service... Oct 2 19:31:29.429255 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:31:29.431000 audit: BPF prog-id=30 op=LOAD Oct 2 19:31:29.430789 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:31:29.433087 systemd[1]: Starting systemd-resolved.service... Oct 2 19:31:29.435000 audit: BPF prog-id=31 op=LOAD Oct 2 19:31:29.436930 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:31:29.438250 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:31:29.439172 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:31:29.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:29.440086 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:31:29.443000 audit[1044]: SYSTEM_BOOT pid=1044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:31:29.446798 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:31:29.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:29.928844 systemd-networkd[987]: eth0: Gained IPv6LL Oct 2 19:31:30.142990 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:31:30.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:30.145509 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:31:30.146327 systemd-timesyncd[1043]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:31:30.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:30.146628 systemd[1]: Reached target time-set.target. Oct 2 19:31:30.146685 systemd-timesyncd[1043]: Initial clock synchronization to Mon 2023-10-02 19:31:30.216655 UTC. Oct 2 19:31:30.147057 systemd-resolved[1042]: Positive Trust Anchors: Oct 2 19:31:30.147067 systemd-resolved[1042]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:31:30.147093 systemd-resolved[1042]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:31:30.149000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:31:30.149000 audit[1054]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff45f1ca20 a2=420 a3=0 items=0 ppid=1033 pid=1054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:30.149000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:31:30.149828 augenrules[1054]: No rules Oct 2 19:31:30.150231 systemd[1]: Finished audit-rules.service. Oct 2 19:31:30.161199 systemd-resolved[1042]: Defaulting to hostname 'linux'. Oct 2 19:31:30.162374 systemd[1]: Started systemd-resolved.service. Oct 2 19:31:30.162980 systemd[1]: Reached target network.target. Oct 2 19:31:30.163492 systemd[1]: Reached target nss-lookup.target. Oct 2 19:31:30.397086 systemd[1]: Finished ldconfig.service. Oct 2 19:31:30.398910 systemd[1]: Starting systemd-update-done.service... Oct 2 19:31:30.411617 systemd[1]: Finished systemd-update-done.service. Oct 2 19:31:30.412300 systemd[1]: Reached target sysinit.target. Oct 2 19:31:30.413079 systemd[1]: Started motdgen.path. Oct 2 19:31:30.413636 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:31:30.414483 systemd[1]: Started logrotate.timer. Oct 2 19:31:30.415162 systemd[1]: Started mdadm.timer. Oct 2 19:31:30.415725 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:31:30.416433 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:31:30.416457 systemd[1]: Reached target paths.target. Oct 2 19:31:30.417054 systemd[1]: Reached target timers.target. Oct 2 19:31:30.417933 systemd[1]: Listening on dbus.socket. Oct 2 19:31:30.419401 systemd[1]: Starting docker.socket... Oct 2 19:31:30.421724 systemd[1]: Listening on sshd.socket. Oct 2 19:31:30.422290 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:31:30.423397 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:31:30.423815 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:31:30.424507 systemd[1]: Listening on docker.socket. Oct 2 19:31:30.425078 systemd[1]: Reached target sockets.target. Oct 2 19:31:30.425617 systemd[1]: Reached target basic.target. Oct 2 19:31:30.426151 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:31:30.426170 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:31:30.426875 systemd[1]: Starting containerd.service... Oct 2 19:31:30.428193 systemd[1]: Starting dbus.service... Oct 2 19:31:30.429488 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:31:30.431110 systemd[1]: Starting extend-filesystems.service... Oct 2 19:31:30.437318 jq[1066]: false Oct 2 19:31:30.431711 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:31:30.432571 systemd[1]: Starting motdgen.service... Oct 2 19:31:30.434256 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:31:30.435645 systemd[1]: Starting prepare-critools.service... Oct 2 19:31:30.437090 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:31:30.438582 systemd[1]: Starting sshd-keygen.service... Oct 2 19:31:30.441015 systemd[1]: Starting systemd-logind.service... Oct 2 19:31:30.441536 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:31:30.441578 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:31:30.442107 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:31:30.442980 systemd[1]: Starting update-engine.service... Oct 2 19:31:30.445910 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:31:30.448222 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:31:30.455747 jq[1082]: true Oct 2 19:31:30.448424 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:31:30.451054 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:31:30.451390 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:31:30.458180 tar[1087]: crictl Oct 2 19:31:30.459208 jq[1092]: true Oct 2 19:31:30.461213 tar[1086]: ./ Oct 2 19:31:30.461213 tar[1086]: ./macvlan Oct 2 19:31:30.470310 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:31:30.470490 systemd[1]: Finished motdgen.service. Oct 2 19:31:30.476065 dbus-daemon[1065]: [system] SELinux support is enabled Oct 2 19:31:30.476236 systemd[1]: Started dbus.service. Oct 2 19:31:30.479288 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:31:30.481114 extend-filesystems[1067]: Found sr0 Oct 2 19:31:30.481114 extend-filesystems[1067]: Found vda Oct 2 19:31:30.479312 systemd[1]: Reached target system-config.target. Oct 2 19:31:30.482765 extend-filesystems[1067]: Found vda1 Oct 2 19:31:30.482765 extend-filesystems[1067]: Found vda2 Oct 2 19:31:30.482765 extend-filesystems[1067]: Found vda3 Oct 2 19:31:30.482765 extend-filesystems[1067]: Found usr Oct 2 19:31:30.482765 extend-filesystems[1067]: Found vda4 Oct 2 19:31:30.482765 extend-filesystems[1067]: Found vda6 Oct 2 19:31:30.482765 extend-filesystems[1067]: Found vda7 Oct 2 19:31:30.480043 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:31:30.480060 systemd[1]: Reached target user-config.target. Oct 2 19:31:30.488352 env[1094]: time="2023-10-02T19:31:30.488303729Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:31:30.488722 bash[1108]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:31:30.491069 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:31:30.491968 extend-filesystems[1067]: Found vda9 Oct 2 19:31:30.493123 extend-filesystems[1067]: Checking size of /dev/vda9 Oct 2 19:31:30.506281 extend-filesystems[1067]: Old size kept for /dev/vda9 Oct 2 19:31:30.506521 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:31:30.507256 systemd[1]: Finished extend-filesystems.service. Oct 2 19:31:30.536905 tar[1086]: ./static Oct 2 19:31:30.537345 env[1094]: time="2023-10-02T19:31:30.537295606Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:31:30.539256 update_engine[1079]: I1002 19:31:30.538843 1079 main.cc:92] Flatcar Update Engine starting Oct 2 19:31:30.539742 env[1094]: time="2023-10-02T19:31:30.539720143Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:31:30.543866 systemd[1]: Started update-engine.service. Oct 2 19:31:30.544248 update_engine[1079]: I1002 19:31:30.544219 1079 update_check_scheduler.cc:74] Next update check in 9m5s Oct 2 19:31:30.546135 systemd[1]: Started locksmithd.service. Oct 2 19:31:30.556847 systemd-logind[1077]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:31:30.557247 env[1094]: time="2023-10-02T19:31:30.557109004Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:31:30.557247 env[1094]: time="2023-10-02T19:31:30.557147756Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:31:30.557173 systemd-logind[1077]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:31:30.557413 env[1094]: time="2023-10-02T19:31:30.557384340Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:31:30.557413 env[1094]: time="2023-10-02T19:31:30.557400631Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:31:30.557490 env[1094]: time="2023-10-02T19:31:30.557428853Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:31:30.557490 env[1094]: time="2023-10-02T19:31:30.557438171Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:31:30.557548 env[1094]: time="2023-10-02T19:31:30.557495829Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:31:30.557700 systemd-logind[1077]: New seat seat0. Oct 2 19:31:30.557839 env[1094]: time="2023-10-02T19:31:30.557701896Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:31:30.557839 env[1094]: time="2023-10-02T19:31:30.557795311Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:31:30.557839 env[1094]: time="2023-10-02T19:31:30.557807443Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:31:30.557928 env[1094]: time="2023-10-02T19:31:30.557845735Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:31:30.557928 env[1094]: time="2023-10-02T19:31:30.557856235Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:31:30.559729 systemd[1]: Started systemd-logind.service. Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.565830239Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.565869202Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.565884591Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.565934515Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.565951356Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.565967476Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.566035765Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.566051023Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.566064859Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.566082843Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.566100626Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.566116967Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.566227775Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:31:30.568117 env[1094]: time="2023-10-02T19:31:30.566299890Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566633505Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566663842Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566679191Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566741207Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566756286Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566770482Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566833050Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566847837Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566861934Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566874147Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566889496Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.566903983Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.567020251Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.567038545Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.568517 env[1094]: time="2023-10-02T19:31:30.567051750Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.569343 env[1094]: time="2023-10-02T19:31:30.567064925Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:31:30.569343 env[1094]: time="2023-10-02T19:31:30.567081225Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:31:30.569343 env[1094]: time="2023-10-02T19:31:30.567092576Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:31:30.569343 env[1094]: time="2023-10-02T19:31:30.567110129Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:31:30.569343 env[1094]: time="2023-10-02T19:31:30.567143322Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.567353345Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.567413268Z" level=info msg="Connect containerd service" Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.567446530Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.568083244Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.568696274Z" level=info msg="Start subscribing containerd event" Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.568740106Z" level=info msg="Start recovering state" Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.568797674Z" level=info msg="Start event monitor" Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.568808454Z" level=info msg="Start snapshots syncer" Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.568818874Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:31:30.569472 env[1094]: time="2023-10-02T19:31:30.568826969Z" level=info msg="Start streaming server" Oct 2 19:31:30.571163 env[1094]: time="2023-10-02T19:31:30.569720415Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:31:30.571163 env[1094]: time="2023-10-02T19:31:30.569760079Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:31:30.571163 env[1094]: time="2023-10-02T19:31:30.569841632Z" level=info msg="containerd successfully booted in 0.082174s" Oct 2 19:31:30.569877 systemd[1]: Started containerd.service. Oct 2 19:31:30.577119 tar[1086]: ./vlan Oct 2 19:31:30.611360 tar[1086]: ./portmap Oct 2 19:31:30.640920 tar[1086]: ./host-local Oct 2 19:31:30.657055 locksmithd[1125]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:31:30.667211 tar[1086]: ./vrf Oct 2 19:31:30.697749 tar[1086]: ./bridge Oct 2 19:31:30.731248 tar[1086]: ./tuning Oct 2 19:31:30.760510 tar[1086]: ./firewall Oct 2 19:31:30.795928 tar[1086]: ./host-device Oct 2 19:31:30.825482 tar[1086]: ./sbr Oct 2 19:31:30.852303 tar[1086]: ./loopback Oct 2 19:31:30.858676 systemd[1]: Finished prepare-critools.service. Oct 2 19:31:30.862380 sshd_keygen[1083]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:31:30.875989 tar[1086]: ./dhcp Oct 2 19:31:30.878771 systemd[1]: Finished sshd-keygen.service. Oct 2 19:31:30.880436 systemd[1]: Starting issuegen.service... Oct 2 19:31:30.884246 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:31:30.884352 systemd[1]: Finished issuegen.service. Oct 2 19:31:30.885774 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:31:30.890508 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:31:30.892066 systemd[1]: Started getty@tty1.service. Oct 2 19:31:30.893394 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:31:30.894087 systemd[1]: Reached target getty.target. Oct 2 19:31:30.942334 tar[1086]: ./ptp Oct 2 19:31:30.970194 tar[1086]: ./ipvlan Oct 2 19:31:30.997123 tar[1086]: ./bandwidth Oct 2 19:31:31.030746 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:31:31.031679 systemd[1]: Reached target multi-user.target. Oct 2 19:31:31.033371 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:31:31.039269 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:31:31.039382 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:31:31.040115 systemd[1]: Startup finished in 523ms (kernel) + 7.362s (initrd) + 8.010s (userspace) = 15.896s. Oct 2 19:31:32.955266 systemd[1]: Created slice system-sshd.slice. Oct 2 19:31:32.956143 systemd[1]: Started sshd@0-10.0.0.13:22-10.0.0.1:37062.service. Oct 2 19:31:32.996394 sshd[1148]: Accepted publickey for core from 10.0.0.1 port 37062 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:31:32.997659 sshd[1148]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:33.005663 systemd-logind[1077]: New session 1 of user core. Oct 2 19:31:33.006417 systemd[1]: Created slice user-500.slice. Oct 2 19:31:33.007326 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:31:33.014188 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:31:33.015229 systemd[1]: Starting user@500.service... Oct 2 19:31:33.017497 (systemd)[1151]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:33.078507 systemd[1151]: Queued start job for default target default.target. Oct 2 19:31:33.078985 systemd[1151]: Reached target paths.target. Oct 2 19:31:33.079008 systemd[1151]: Reached target sockets.target. Oct 2 19:31:33.079024 systemd[1151]: Reached target timers.target. Oct 2 19:31:33.079039 systemd[1151]: Reached target basic.target. Oct 2 19:31:33.079082 systemd[1151]: Reached target default.target. Oct 2 19:31:33.079111 systemd[1151]: Startup finished in 57ms. Oct 2 19:31:33.079186 systemd[1]: Started user@500.service. Oct 2 19:31:33.080069 systemd[1]: Started session-1.scope. Oct 2 19:31:33.129656 systemd[1]: Started sshd@1-10.0.0.13:22-10.0.0.1:37068.service. Oct 2 19:31:33.168100 sshd[1160]: Accepted publickey for core from 10.0.0.1 port 37068 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:31:33.168900 sshd[1160]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:33.175188 systemd-logind[1077]: New session 2 of user core. Oct 2 19:31:33.175974 systemd[1]: Started session-2.scope. Oct 2 19:31:33.228988 sshd[1160]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:33.231632 systemd[1]: sshd@1-10.0.0.13:22-10.0.0.1:37068.service: Deactivated successfully. Oct 2 19:31:33.232127 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:31:33.232620 systemd-logind[1077]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:31:33.233727 systemd[1]: Started sshd@2-10.0.0.13:22-10.0.0.1:37082.service. Oct 2 19:31:33.234410 systemd-logind[1077]: Removed session 2. Oct 2 19:31:33.267535 sshd[1166]: Accepted publickey for core from 10.0.0.1 port 37082 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:31:33.268651 sshd[1166]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:33.271759 systemd-logind[1077]: New session 3 of user core. Oct 2 19:31:33.272492 systemd[1]: Started session-3.scope. Oct 2 19:31:33.321157 sshd[1166]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:33.323750 systemd[1]: sshd@2-10.0.0.13:22-10.0.0.1:37082.service: Deactivated successfully. Oct 2 19:31:33.324269 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:31:33.324731 systemd-logind[1077]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:31:33.325688 systemd[1]: Started sshd@3-10.0.0.13:22-10.0.0.1:37084.service. Oct 2 19:31:33.326338 systemd-logind[1077]: Removed session 3. Oct 2 19:31:33.359584 sshd[1172]: Accepted publickey for core from 10.0.0.1 port 37084 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:31:33.360600 sshd[1172]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:33.363446 systemd-logind[1077]: New session 4 of user core. Oct 2 19:31:33.364131 systemd[1]: Started session-4.scope. Oct 2 19:31:33.416398 sshd[1172]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:33.418958 systemd[1]: sshd@3-10.0.0.13:22-10.0.0.1:37084.service: Deactivated successfully. Oct 2 19:31:33.419522 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:31:33.420048 systemd-logind[1077]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:31:33.420950 systemd[1]: Started sshd@4-10.0.0.13:22-10.0.0.1:37092.service. Oct 2 19:31:33.421724 systemd-logind[1077]: Removed session 4. Oct 2 19:31:33.454791 sshd[1178]: Accepted publickey for core from 10.0.0.1 port 37092 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:31:33.455686 sshd[1178]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:33.458509 systemd-logind[1077]: New session 5 of user core. Oct 2 19:31:33.459233 systemd[1]: Started session-5.scope. Oct 2 19:31:33.516000 sudo[1181]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:31:33.516160 sudo[1181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:31:33.525757 dbus-daemon[1065]: \xd0=$\x9f\x97U: received setenforce notice (enforcing=1899957408) Oct 2 19:31:33.527731 sudo[1181]: pam_unix(sudo:session): session closed for user root Oct 2 19:31:33.529322 sshd[1178]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:33.532182 systemd[1]: sshd@4-10.0.0.13:22-10.0.0.1:37092.service: Deactivated successfully. Oct 2 19:31:33.532774 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:31:33.533270 systemd-logind[1077]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:31:33.534164 systemd[1]: Started sshd@5-10.0.0.13:22-10.0.0.1:37098.service. Oct 2 19:31:33.534889 systemd-logind[1077]: Removed session 5. Oct 2 19:31:33.567708 sshd[1185]: Accepted publickey for core from 10.0.0.1 port 37098 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:31:33.568616 sshd[1185]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:33.571351 systemd-logind[1077]: New session 6 of user core. Oct 2 19:31:33.572049 systemd[1]: Started session-6.scope. Oct 2 19:31:33.622558 sudo[1189]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:31:33.622805 sudo[1189]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:31:33.624659 sudo[1189]: pam_unix(sudo:session): session closed for user root Oct 2 19:31:33.628519 sudo[1188]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:31:33.628692 sudo[1188]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:31:33.636095 systemd[1]: Stopping audit-rules.service... Oct 2 19:31:33.635000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:31:33.635000 audit[1192]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc92333200 a2=420 a3=0 items=0 ppid=1 pid=1192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:33.635000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:31:33.637531 auditctl[1192]: No rules Oct 2 19:31:33.637684 kernel: kauditd_printk_skb: 131 callbacks suppressed Oct 2 19:31:33.637712 kernel: audit: type=1305 audit(1696275093.635:166): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:31:33.637726 kernel: audit: type=1300 audit(1696275093.635:166): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc92333200 a2=420 a3=0 items=0 ppid=1 pid=1192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:33.637740 kernel: audit: type=1327 audit(1696275093.635:166): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:31:33.637841 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:31:33.638047 systemd[1]: Stopped audit-rules.service. Oct 2 19:31:33.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.638620 kernel: audit: type=1131 audit(1696275093.636:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.639697 systemd[1]: Starting audit-rules.service... Oct 2 19:31:33.654750 augenrules[1209]: No rules Oct 2 19:31:33.655305 systemd[1]: Finished audit-rules.service. Oct 2 19:31:33.663634 kernel: audit: type=1130 audit(1696275093.653:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.663685 kernel: audit: type=1106 audit(1696275093.654:169): pid=1188 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.663702 kernel: audit: type=1104 audit(1696275093.654:170): pid=1188 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.663717 kernel: audit: type=1106 audit(1696275093.656:171): pid=1185 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:33.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.654000 audit[1188]: USER_END pid=1188 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.654000 audit[1188]: CRED_DISP pid=1188 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.656000 audit[1185]: USER_END pid=1185 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:33.656056 sudo[1188]: pam_unix(sudo:session): session closed for user root Oct 2 19:31:33.660541 systemd[1]: Started sshd@6-10.0.0.13:22-10.0.0.1:37104.service. Oct 2 19:31:33.657189 sshd[1185]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:33.661100 systemd[1]: sshd@5-10.0.0.13:22-10.0.0.1:37098.service: Deactivated successfully. Oct 2 19:31:33.661738 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:31:33.662295 systemd-logind[1077]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:31:33.663170 systemd-logind[1077]: Removed session 6. Oct 2 19:31:33.664547 kernel: audit: type=1104 audit(1696275093.657:172): pid=1185 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:33.657000 audit[1185]: CRED_DISP pid=1185 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:33.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.13:22-10.0.0.1:37104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.668845 kernel: audit: type=1130 audit(1696275093.659:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.13:22-10.0.0.1:37104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.13:22-10.0.0.1:37098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.694000 audit[1214]: USER_ACCT pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:33.695532 sshd[1214]: Accepted publickey for core from 10.0.0.1 port 37104 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:31:33.695000 audit[1214]: CRED_ACQ pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:33.695000 audit[1214]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7d5e5530 a2=3 a3=0 items=0 ppid=1 pid=1214 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:33.695000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:33.696411 sshd[1214]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:33.699056 systemd-logind[1077]: New session 7 of user core. Oct 2 19:31:33.699651 systemd[1]: Started session-7.scope. Oct 2 19:31:33.702000 audit[1214]: USER_START pid=1214 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:33.703000 audit[1217]: CRED_ACQ pid=1217 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:31:33.749000 audit[1218]: USER_ACCT pid=1218 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.750055 sudo[1218]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:31:33.749000 audit[1218]: CRED_REFR pid=1218 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:33.750226 sudo[1218]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:31:33.750000 audit[1218]: USER_START pid=1218 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.306327 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:31:34.310617 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:31:34.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.310846 systemd[1]: Reached target network-online.target. Oct 2 19:31:34.311721 systemd[1]: Starting docker.service... Oct 2 19:31:34.339210 env[1235]: time="2023-10-02T19:31:34.339160070Z" level=info msg="Starting up" Oct 2 19:31:34.340243 env[1235]: time="2023-10-02T19:31:34.340220221Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:31:34.340243 env[1235]: time="2023-10-02T19:31:34.340235932Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:31:34.340332 env[1235]: time="2023-10-02T19:31:34.340262488Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:31:34.340332 env[1235]: time="2023-10-02T19:31:34.340277926Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:31:34.341630 env[1235]: time="2023-10-02T19:31:34.341610289Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:31:34.341630 env[1235]: time="2023-10-02T19:31:34.341625739Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:31:34.341711 env[1235]: time="2023-10-02T19:31:34.341645239Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:31:34.341711 env[1235]: time="2023-10-02T19:31:34.341656980Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:31:34.345901 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2927891473-merged.mount: Deactivated successfully. Oct 2 19:31:34.803754 env[1235]: time="2023-10-02T19:31:34.803641952Z" level=info msg="Loading containers: start." Oct 2 19:31:34.840000 audit[1272]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.840000 audit[1272]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffee9cf1570 a2=0 a3=7ffee9cf155c items=0 ppid=1235 pid=1272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.840000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:31:34.841000 audit[1274]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.841000 audit[1274]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffeb0ef4e80 a2=0 a3=7ffeb0ef4e6c items=0 ppid=1235 pid=1274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.841000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:31:34.843000 audit[1276]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.843000 audit[1276]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff18116e80 a2=0 a3=7fff18116e6c items=0 ppid=1235 pid=1276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.843000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:31:34.844000 audit[1278]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.844000 audit[1278]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff9995d360 a2=0 a3=7fff9995d34c items=0 ppid=1235 pid=1278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.844000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:31:34.845000 audit[1280]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.845000 audit[1280]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe35eb2b80 a2=0 a3=7ffe35eb2b6c items=0 ppid=1235 pid=1280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.845000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:31:34.859000 audit[1285]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.859000 audit[1285]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffeb0c4e670 a2=0 a3=7ffeb0c4e65c items=0 ppid=1235 pid=1285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.859000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:31:34.867000 audit[1287]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.867000 audit[1287]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffe9f85b10 a2=0 a3=7fffe9f85afc items=0 ppid=1235 pid=1287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.867000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:31:34.869000 audit[1289]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.869000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffce3e56ff0 a2=0 a3=7ffce3e56fdc items=0 ppid=1235 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.869000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:31:34.870000 audit[1291]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.870000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fffd03d3790 a2=0 a3=7fffd03d377c items=0 ppid=1235 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.870000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:34.877000 audit[1295]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.877000 audit[1295]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffeb6d52f20 a2=0 a3=7ffeb6d52f0c items=0 ppid=1235 pid=1295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.877000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:34.878000 audit[1296]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.878000 audit[1296]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffab8ae150 a2=0 a3=7fffab8ae13c items=0 ppid=1235 pid=1296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.878000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:34.884619 kernel: Initializing XFRM netlink socket Oct 2 19:31:34.913599 env[1235]: time="2023-10-02T19:31:34.913563606Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:31:34.929000 audit[1304]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.929000 audit[1304]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fff2d4cc530 a2=0 a3=7fff2d4cc51c items=0 ppid=1235 pid=1304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.929000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:31:34.938000 audit[1307]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.938000 audit[1307]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdd7ce4950 a2=0 a3=7ffdd7ce493c items=0 ppid=1235 pid=1307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.938000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:31:34.939000 audit[1310]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.939000 audit[1310]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd76bd2b80 a2=0 a3=7ffd76bd2b6c items=0 ppid=1235 pid=1310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.939000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:31:34.942000 audit[1312]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.942000 audit[1312]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffefd409350 a2=0 a3=7ffefd40933c items=0 ppid=1235 pid=1312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:31:34.942000 audit[1314]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.942000 audit[1314]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffdb3a1b3b0 a2=0 a3=7ffdb3a1b39c items=0 ppid=1235 pid=1314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:31:34.944000 audit[1316]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.944000 audit[1316]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffdf20f9110 a2=0 a3=7ffdf20f90fc items=0 ppid=1235 pid=1316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.944000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:31:34.945000 audit[1318]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.945000 audit[1318]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffcea04c1e0 a2=0 a3=7ffcea04c1cc items=0 ppid=1235 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.945000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:31:34.951000 audit[1321]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.951000 audit[1321]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffdcd7cc260 a2=0 a3=7ffdcd7cc24c items=0 ppid=1235 pid=1321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.951000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:31:34.953000 audit[1323]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.953000 audit[1323]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe8297ac00 a2=0 a3=7ffe8297abec items=0 ppid=1235 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.953000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:31:34.954000 audit[1325]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.954000 audit[1325]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffcb78e5f60 a2=0 a3=7ffcb78e5f4c items=0 ppid=1235 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.954000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:31:34.956000 audit[1327]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.956000 audit[1327]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe9a2ab770 a2=0 a3=7ffe9a2ab75c items=0 ppid=1235 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.956000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:31:34.958075 systemd-networkd[987]: docker0: Link UP Oct 2 19:31:34.965000 audit[1331]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.965000 audit[1331]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffedba3b8b0 a2=0 a3=7ffedba3b89c items=0 ppid=1235 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.965000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:34.965000 audit[1332]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:34.965000 audit[1332]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff45900360 a2=0 a3=7fff4590034c items=0 ppid=1235 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:34.965000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:34.967771 env[1235]: time="2023-10-02T19:31:34.967739505Z" level=info msg="Loading containers: done." Oct 2 19:31:34.974689 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3409202140-merged.mount: Deactivated successfully. Oct 2 19:31:34.982270 env[1235]: time="2023-10-02T19:31:34.982224729Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:31:34.982428 env[1235]: time="2023-10-02T19:31:34.982403691Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:31:34.982514 env[1235]: time="2023-10-02T19:31:34.982492517Z" level=info msg="Daemon has completed initialization" Oct 2 19:31:34.996802 systemd[1]: Started docker.service. Oct 2 19:31:34.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:35.002277 env[1235]: time="2023-10-02T19:31:35.002237022Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:31:35.015166 systemd[1]: Reloading. Oct 2 19:31:35.084628 /usr/lib/systemd/system-generators/torcx-generator[1382]: time="2023-10-02T19:31:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:31:35.084658 /usr/lib/systemd/system-generators/torcx-generator[1382]: time="2023-10-02T19:31:35Z" level=info msg="torcx already run" Oct 2 19:31:35.134083 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:31:35.134098 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:31:35.150240 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:31:35.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit: BPF prog-id=37 op=LOAD Oct 2 19:31:35.207000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit: BPF prog-id=38 op=LOAD Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.207000 audit: BPF prog-id=39 op=LOAD Oct 2 19:31:35.207000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:31:35.207000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit: BPF prog-id=40 op=LOAD Oct 2 19:31:35.208000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.208000 audit: BPF prog-id=41 op=LOAD Oct 2 19:31:35.208000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit: BPF prog-id=42 op=LOAD Oct 2 19:31:35.209000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit: BPF prog-id=43 op=LOAD Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.209000 audit: BPF prog-id=44 op=LOAD Oct 2 19:31:35.209000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:31:35.209000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.210000 audit: BPF prog-id=45 op=LOAD Oct 2 19:31:35.210000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit: BPF prog-id=46 op=LOAD Oct 2 19:31:35.211000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit: BPF prog-id=47 op=LOAD Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.211000 audit: BPF prog-id=48 op=LOAD Oct 2 19:31:35.211000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:31:35.211000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit: BPF prog-id=49 op=LOAD Oct 2 19:31:35.213000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit: BPF prog-id=50 op=LOAD Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:35.213000 audit: BPF prog-id=51 op=LOAD Oct 2 19:31:35.213000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:31:35.213000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:31:35.220578 systemd[1]: Started kubelet.service. Oct 2 19:31:35.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:35.263307 kubelet[1420]: E1002 19:31:35.263260 1420 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:31:35.264779 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:31:35.264921 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:31:35.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:45.450897 env[1094]: time="2023-10-02T19:31:45.450846013Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.5\"" Oct 2 19:31:45.515657 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:31:45.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:45.515832 systemd[1]: Stopped kubelet.service. Oct 2 19:31:45.517540 systemd[1]: Started kubelet.service. Oct 2 19:31:45.518302 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:31:45.518338 kernel: audit: type=1130 audit(1696275105.515:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:45.518361 kernel: audit: type=1131 audit(1696275105.515:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:45.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:45.520198 kernel: audit: type=1130 audit(1696275105.517:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:45.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:45.555710 kubelet[1443]: E1002 19:31:45.555657 1443 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:31:45.558645 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:31:45.558756 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:31:45.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:45.561630 kernel: audit: type=1131 audit(1696275105.558:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:47.184931 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3589872606.mount: Deactivated successfully. Oct 2 19:31:50.437972 env[1094]: time="2023-10-02T19:31:50.437908709Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:50.440207 env[1094]: time="2023-10-02T19:31:50.440156044Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:25c2ecde661fc1a43c73f77464f3359f334da94d49c56474084dee00bcdc6146,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:50.442305 env[1094]: time="2023-10-02T19:31:50.442274366Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:50.443975 env[1094]: time="2023-10-02T19:31:50.443927886Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6f89f3e9107e1b7010975137d072d601286d15fb64f572846a4145b9b0e0fc55,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:50.444661 env[1094]: time="2023-10-02T19:31:50.444632707Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.5\" returns image reference \"sha256:25c2ecde661fc1a43c73f77464f3359f334da94d49c56474084dee00bcdc6146\"" Oct 2 19:31:50.453703 env[1094]: time="2023-10-02T19:31:50.453669067Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.5\"" Oct 2 19:31:54.046664 env[1094]: time="2023-10-02T19:31:54.046595560Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:54.086107 env[1094]: time="2023-10-02T19:31:54.086059364Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a7403c147a51687e0eb59abd270d501f243bc565f45f969ef44b71c16d043de6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:54.130660 env[1094]: time="2023-10-02T19:31:54.130590805Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:54.168675 env[1094]: time="2023-10-02T19:31:54.168641253Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:a6457911fa41c7706fa1aca6cb50352b1c3e90b70c9707f1e0b6363d3188b81a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:54.169354 env[1094]: time="2023-10-02T19:31:54.169306982Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.5\" returns image reference \"sha256:a7403c147a51687e0eb59abd270d501f243bc565f45f969ef44b71c16d043de6\"" Oct 2 19:31:54.180094 env[1094]: time="2023-10-02T19:31:54.180066079Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.5\"" Oct 2 19:31:55.583366 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:31:55.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:55.583551 systemd[1]: Stopped kubelet.service. Oct 2 19:31:55.584836 systemd[1]: Started kubelet.service. Oct 2 19:31:55.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:55.587989 kernel: audit: type=1130 audit(1696275115.582:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:55.588046 kernel: audit: type=1131 audit(1696275115.583:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:55.588066 kernel: audit: type=1130 audit(1696275115.583:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:55.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:55.642284 kubelet[1466]: E1002 19:31:55.642215 1466 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:31:55.644809 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:31:55.644931 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:31:55.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:55.647622 kernel: audit: type=1131 audit(1696275115.644:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:57.486062 env[1094]: time="2023-10-02T19:31:57.486004369Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:57.488253 env[1094]: time="2023-10-02T19:31:57.488203283Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:200132c1d91abbe4da0942bfc92953fa5122c8fdf6f6156cf3d60d73fbf7f881,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:57.490394 env[1094]: time="2023-10-02T19:31:57.490365588Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:57.493003 env[1094]: time="2023-10-02T19:31:57.492975093Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:a3938384e78f260c79dc84e9149bb5d429e817fa9c6905c1471a1e14db527aab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:57.493568 env[1094]: time="2023-10-02T19:31:57.493536569Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.5\" returns image reference \"sha256:200132c1d91abbe4da0942bfc92953fa5122c8fdf6f6156cf3d60d73fbf7f881\"" Oct 2 19:31:57.501306 env[1094]: time="2023-10-02T19:31:57.501276475Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.5\"" Oct 2 19:31:58.463244 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount492618566.mount: Deactivated successfully. Oct 2 19:31:59.183961 env[1094]: time="2023-10-02T19:31:59.183903627Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:59.186691 env[1094]: time="2023-10-02T19:31:59.186635931Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08440588500d7e7153a0adc35d11bfba3387785503a8e5c466e92583ef4a0ce9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:59.188156 env[1094]: time="2023-10-02T19:31:59.188074579Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:59.189402 env[1094]: time="2023-10-02T19:31:59.189363355Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:c9df3c07cfe4791905060417fefc09c5b8010ee2b46c13f27015c3f9d4397b6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:59.189808 env[1094]: time="2023-10-02T19:31:59.189777549Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.5\" returns image reference \"sha256:08440588500d7e7153a0adc35d11bfba3387785503a8e5c466e92583ef4a0ce9\"" Oct 2 19:31:59.199140 env[1094]: time="2023-10-02T19:31:59.199096230Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:32:00.056911 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount907043230.mount: Deactivated successfully. Oct 2 19:32:00.211025 env[1094]: time="2023-10-02T19:32:00.210977138Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:00.213844 env[1094]: time="2023-10-02T19:32:00.213816131Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:00.215331 env[1094]: time="2023-10-02T19:32:00.215278180Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:00.216453 env[1094]: time="2023-10-02T19:32:00.216425892Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:00.216861 env[1094]: time="2023-10-02T19:32:00.216833020Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:32:00.224668 env[1094]: time="2023-10-02T19:32:00.224644527Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:32:00.953177 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1386280455.mount: Deactivated successfully. Oct 2 19:32:05.833424 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Oct 2 19:32:05.839679 kernel: audit: type=1130 audit(1696275125.832:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:05.839723 kernel: audit: type=1131 audit(1696275125.832:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:05.839741 kernel: audit: type=1130 audit(1696275125.833:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:05.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:05.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:05.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:05.833627 systemd[1]: Stopped kubelet.service. Oct 2 19:32:05.834976 systemd[1]: Started kubelet.service. Oct 2 19:32:05.872842 env[1094]: time="2023-10-02T19:32:05.872787866Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:05.874883 env[1094]: time="2023-10-02T19:32:05.874856669Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:05.876540 env[1094]: time="2023-10-02T19:32:05.876512313Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:05.877940 kubelet[1494]: E1002 19:32:05.877877 1494 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:32:05.878287 env[1094]: time="2023-10-02T19:32:05.878257195Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:05.878986 env[1094]: time="2023-10-02T19:32:05.878933593Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:32:05.880533 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:32:05.880691 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:32:05.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:32:05.883622 kernel: audit: type=1131 audit(1696275125.879:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:32:05.887561 env[1094]: time="2023-10-02T19:32:05.887395530Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:32:06.514979 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2266010638.mount: Deactivated successfully. Oct 2 19:32:08.563839 env[1094]: time="2023-10-02T19:32:08.563769132Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:08.569800 env[1094]: time="2023-10-02T19:32:08.569738042Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:08.572339 env[1094]: time="2023-10-02T19:32:08.572299673Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:08.574644 env[1094]: time="2023-10-02T19:32:08.574577349Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:08.574988 env[1094]: time="2023-10-02T19:32:08.574947223Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:32:08.953884 env[1094]: time="2023-10-02T19:32:08.953840813Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:32:12.687880 env[1094]: time="2023-10-02T19:32:12.687815212Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:12.689933 env[1094]: time="2023-10-02T19:32:12.689877425Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:12.691638 env[1094]: time="2023-10-02T19:32:12.691613297Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:12.693114 env[1094]: time="2023-10-02T19:32:12.693073197Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:12.693715 env[1094]: time="2023-10-02T19:32:12.693680761Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 19:32:12.709050 env[1094]: time="2023-10-02T19:32:12.708999859Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:32:15.846278 env[1094]: time="2023-10-02T19:32:15.846223396Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:15.848627 env[1094]: time="2023-10-02T19:32:15.848580258Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:15.851379 env[1094]: time="2023-10-02T19:32:15.851348413Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:15.854403 env[1094]: time="2023-10-02T19:32:15.854373068Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:15.855046 env[1094]: time="2023-10-02T19:32:15.855014991Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 19:32:15.871249 env[1094]: time="2023-10-02T19:32:15.871204040Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:32:16.083406 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Oct 2 19:32:16.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:16.083592 systemd[1]: Stopped kubelet.service. Oct 2 19:32:16.084925 systemd[1]: Started kubelet.service. Oct 2 19:32:16.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:16.089084 kernel: audit: type=1130 audit(1696275136.082:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:16.089140 kernel: audit: type=1131 audit(1696275136.082:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:16.089158 kernel: audit: type=1130 audit(1696275136.083:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:16.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:16.133543 kubelet[1571]: E1002 19:32:16.133406 1571 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:32:16.135585 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:32:16.135714 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:32:16.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:32:16.138616 kernel: audit: type=1131 audit(1696275136.134:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:32:16.185682 update_engine[1079]: I1002 19:32:16.185642 1079 update_attempter.cc:505] Updating boot flags... Oct 2 19:32:17.829343 env[1094]: time="2023-10-02T19:32:17.829280448Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:17.831540 env[1094]: time="2023-10-02T19:32:17.831501238Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:17.833177 env[1094]: time="2023-10-02T19:32:17.833152168Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:17.834531 env[1094]: time="2023-10-02T19:32:17.834502355Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:17.835101 env[1094]: time="2023-10-02T19:32:17.835069728Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 19:32:17.850004 env[1094]: time="2023-10-02T19:32:17.849964891Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:32:18.968233 env[1094]: time="2023-10-02T19:32:18.968172894Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:18.970455 env[1094]: time="2023-10-02T19:32:18.970426810Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:18.971700 env[1094]: time="2023-10-02T19:32:18.971670234Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:18.972976 env[1094]: time="2023-10-02T19:32:18.972954679Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:18.973296 env[1094]: time="2023-10-02T19:32:18.973276623Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:32:20.879114 systemd[1]: Stopped kubelet.service. Oct 2 19:32:20.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:20.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:20.883445 kernel: audit: type=1130 audit(1696275140.877:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:20.883555 kernel: audit: type=1131 audit(1696275140.877:400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:20.892638 systemd[1]: Reloading. Oct 2 19:32:20.953577 /usr/lib/systemd/system-generators/torcx-generator[1644]: time="2023-10-02T19:32:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:32:20.953962 /usr/lib/systemd/system-generators/torcx-generator[1644]: time="2023-10-02T19:32:20Z" level=info msg="torcx already run" Oct 2 19:32:21.010333 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:32:21.010349 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:32:21.026579 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:32:21.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.087332 kernel: audit: type=1400 audit(1696275141.081:401): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.087375 kernel: audit: type=1400 audit(1696275141.081:402): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.087395 kernel: audit: type=1400 audit(1696275141.081:403): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089233 kernel: audit: type=1400 audit(1696275141.081:404): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.091246 kernel: audit: type=1400 audit(1696275141.081:405): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093089 kernel: audit: type=1400 audit(1696275141.081:406): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.094891 kernel: audit: type=1400 audit(1696275141.081:407): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.096719 kernel: audit: type=1400 audit(1696275141.081:408): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.114061 kernel: audit: type=1400 audit(1696275141.081:409): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.115834 kernel: audit: type=1400 audit(1696275141.085:410): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.085000 audit: BPF prog-id=52 op=LOAD Oct 2 19:32:21.085000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:32:21.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.118641 kernel: audit: type=1334 audit(1696275141.085:411): prog-id=52 op=LOAD Oct 2 19:32:21.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089000 audit: BPF prog-id=53 op=LOAD Oct 2 19:32:21.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit: BPF prog-id=54 op=LOAD Oct 2 19:32:21.093000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:32:21.093000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit: BPF prog-id=55 op=LOAD Oct 2 19:32:21.112000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit: BPF prog-id=56 op=LOAD Oct 2 19:32:21.116000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit: BPF prog-id=57 op=LOAD Oct 2 19:32:21.116000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit: BPF prog-id=58 op=LOAD Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit: BPF prog-id=59 op=LOAD Oct 2 19:32:21.117000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:32:21.117000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.117000 audit: BPF prog-id=60 op=LOAD Oct 2 19:32:21.117000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:32:21.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit: BPF prog-id=61 op=LOAD Oct 2 19:32:21.119000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit: BPF prog-id=62 op=LOAD Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.119000 audit: BPF prog-id=63 op=LOAD Oct 2 19:32:21.119000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:32:21.119000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit: BPF prog-id=64 op=LOAD Oct 2 19:32:21.120000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit: BPF prog-id=65 op=LOAD Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.121000 audit: BPF prog-id=66 op=LOAD Oct 2 19:32:21.121000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:32:21.121000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:32:21.132424 systemd[1]: Started kubelet.service. Oct 2 19:32:21.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:21.178750 kubelet[1685]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:32:21.178750 kubelet[1685]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:32:21.179139 kubelet[1685]: I1002 19:32:21.178760 1685 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:32:21.179996 kubelet[1685]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:32:21.179996 kubelet[1685]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:32:21.463883 kubelet[1685]: I1002 19:32:21.463794 1685 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:32:21.463883 kubelet[1685]: I1002 19:32:21.463816 1685 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:32:21.464051 kubelet[1685]: I1002 19:32:21.464028 1685 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:32:21.466207 kubelet[1685]: I1002 19:32:21.466189 1685 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:32:21.466790 kubelet[1685]: E1002 19:32:21.466761 1685 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.13:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:21.468980 kubelet[1685]: I1002 19:32:21.468962 1685 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:32:21.469110 kubelet[1685]: I1002 19:32:21.469099 1685 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:32:21.469172 kubelet[1685]: I1002 19:32:21.469159 1685 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:32:21.469249 kubelet[1685]: I1002 19:32:21.469176 1685 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:32:21.469249 kubelet[1685]: I1002 19:32:21.469184 1685 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:32:21.469293 kubelet[1685]: I1002 19:32:21.469252 1685 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:32:21.471335 kubelet[1685]: I1002 19:32:21.471320 1685 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:32:21.471393 kubelet[1685]: I1002 19:32:21.471342 1685 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:32:21.471393 kubelet[1685]: I1002 19:32:21.471365 1685 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:32:21.471393 kubelet[1685]: I1002 19:32:21.471383 1685 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:32:21.472072 kubelet[1685]: W1002 19:32:21.472026 1685 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.13:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:21.472152 kubelet[1685]: E1002 19:32:21.472086 1685 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.13:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:21.472191 kubelet[1685]: W1002 19:32:21.472148 1685 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.13:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:21.472191 kubelet[1685]: E1002 19:32:21.472175 1685 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.13:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:21.472279 kubelet[1685]: I1002 19:32:21.472255 1685 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:32:21.472755 kubelet[1685]: W1002 19:32:21.472727 1685 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:32:21.473106 kubelet[1685]: I1002 19:32:21.473078 1685 server.go:1186] "Started kubelet" Oct 2 19:32:21.472000 audit[1685]: AVC avc: denied { mac_admin } for pid=1685 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.472000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:32:21.472000 audit[1685]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f4e330 a1=c000f682a0 a2=c000f4e300 a3=25 items=0 ppid=1 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.472000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:32:21.472000 audit[1685]: AVC avc: denied { mac_admin } for pid=1685 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:21.472000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:32:21.472000 audit[1685]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b86c60 a1=c000f682b8 a2=c000f4e3c0 a3=25 items=0 ppid=1 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.472000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:32:21.474920 kubelet[1685]: I1002 19:32:21.474583 1685 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:32:21.474920 kubelet[1685]: I1002 19:32:21.474633 1685 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:32:21.474920 kubelet[1685]: I1002 19:32:21.474680 1685 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:32:21.474920 kubelet[1685]: E1002 19:32:21.474824 1685 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a614100d3b1ad", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 473055149, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 473055149, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.13:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.13:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:32:21.475077 kubelet[1685]: E1002 19:32:21.474992 1685 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:32:21.475077 kubelet[1685]: E1002 19:32:21.475010 1685 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:32:21.475133 kubelet[1685]: I1002 19:32:21.475125 1685 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:32:21.475886 kubelet[1685]: I1002 19:32:21.475864 1685 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:32:21.478050 kubelet[1685]: I1002 19:32:21.478034 1685 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:32:21.478121 kubelet[1685]: I1002 19:32:21.478106 1685 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:32:21.478491 kubelet[1685]: W1002 19:32:21.478433 1685 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.13:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:21.478541 kubelet[1685]: E1002 19:32:21.478498 1685 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.13:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:21.478877 kubelet[1685]: E1002 19:32:21.478858 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:32:21.479819 kubelet[1685]: E1002 19:32:21.479796 1685 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.0.0.13:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:21.481000 audit[1697]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.481000 audit[1697]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe6d263750 a2=0 a3=7ffe6d26373c items=0 ppid=1685 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.481000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:32:21.482000 audit[1698]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.482000 audit[1698]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc626515e0 a2=0 a3=7ffc626515cc items=0 ppid=1685 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.482000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:32:21.483000 audit[1700]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.483000 audit[1700]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc536a0160 a2=0 a3=7ffc536a014c items=0 ppid=1685 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.483000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:32:21.485000 audit[1702]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.485000 audit[1702]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe912e3360 a2=0 a3=7ffe912e334c items=0 ppid=1685 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.485000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:32:21.490000 audit[1705]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.490000 audit[1705]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffcc3159a30 a2=0 a3=7ffcc3159a1c items=0 ppid=1685 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.490000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:32:21.491000 audit[1706]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.491000 audit[1706]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd82bc6e70 a2=0 a3=7ffd82bc6e5c items=0 ppid=1685 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.491000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:32:21.496000 audit[1715]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.496000 audit[1715]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc396e9e80 a2=0 a3=7ffc396e9e6c items=0 ppid=1685 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.496000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:32:21.499777 kubelet[1685]: I1002 19:32:21.499762 1685 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:32:21.499870 kubelet[1685]: I1002 19:32:21.499846 1685 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:32:21.499947 kubelet[1685]: I1002 19:32:21.499935 1685 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:32:21.499000 audit[1718]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.499000 audit[1718]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc2db7eea0 a2=0 a3=7ffc2db7ee8c items=0 ppid=1685 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.499000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:32:21.500000 audit[1719]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.500000 audit[1719]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc7461bc50 a2=0 a3=7ffc7461bc3c items=0 ppid=1685 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.500000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:32:21.501000 audit[1720]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.501000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf86aa660 a2=0 a3=7ffdf86aa64c items=0 ppid=1685 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.501000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:32:21.503000 audit[1722]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.503000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffecaee5ef0 a2=0 a3=7ffecaee5edc items=0 ppid=1685 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.503000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:32:21.504000 audit[1724]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.504000 audit[1724]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff9e690dd0 a2=0 a3=7fff9e690dbc items=0 ppid=1685 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.504000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:32:21.506000 audit[1726]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.506000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7fff824aefd0 a2=0 a3=7fff824aefbc items=0 ppid=1685 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.506000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:32:21.507000 audit[1728]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.507000 audit[1728]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fffaeec4c90 a2=0 a3=7fffaeec4c7c items=0 ppid=1685 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.507000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:32:21.509000 audit[1730]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.509000 audit[1730]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffc343837a0 a2=0 a3=7ffc3438378c items=0 ppid=1685 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.509000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:32:21.511321 kubelet[1685]: I1002 19:32:21.511294 1685 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:32:21.510000 audit[1731]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1731 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.510000 audit[1731]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe42404e80 a2=0 a3=7ffe42404e6c items=0 ppid=1685 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.510000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:32:21.510000 audit[1732]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.510000 audit[1732]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd8b2e720 a2=0 a3=7fffd8b2e70c items=0 ppid=1685 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.510000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:32:21.511000 audit[1733]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=1733 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.511000 audit[1733]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe8da81630 a2=0 a3=7ffe8da8161c items=0 ppid=1685 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.511000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:32:21.511000 audit[1734]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=1734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.511000 audit[1734]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe601bf400 a2=0 a3=7ffe601bf3ec items=0 ppid=1685 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.511000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:32:21.512000 audit[1736]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1736 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:21.512000 audit[1736]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7d437c70 a2=0 a3=7ffd7d437c5c items=0 ppid=1685 pid=1736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.512000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:32:21.512000 audit[1737]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.512000 audit[1737]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd15b75690 a2=0 a3=7ffd15b7567c items=0 ppid=1685 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.512000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:32:21.513000 audit[1738]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1738 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.513000 audit[1738]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffccb5a18a0 a2=0 a3=7ffccb5a188c items=0 ppid=1685 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.513000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:32:21.515000 audit[1740]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.515000 audit[1740]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc46dc7b30 a2=0 a3=7ffc46dc7b1c items=0 ppid=1685 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.515000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:32:21.515000 audit[1741]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1741 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.515000 audit[1741]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffef6de270 a2=0 a3=7fffef6de25c items=0 ppid=1685 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.515000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:32:21.516000 audit[1742]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.516000 audit[1742]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe22f6cdd0 a2=0 a3=7ffe22f6cdbc items=0 ppid=1685 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.516000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:32:21.518000 audit[1744]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1744 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.518000 audit[1744]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdf7431010 a2=0 a3=7ffdf7430ffc items=0 ppid=1685 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.518000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:32:21.519000 audit[1746]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.519000 audit[1746]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff8f0dd600 a2=0 a3=7fff8f0dd5ec items=0 ppid=1685 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.519000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:32:21.521000 audit[1748]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1748 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.521000 audit[1748]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffd0cb5a0d0 a2=0 a3=7ffd0cb5a0bc items=0 ppid=1685 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:32:21.523000 audit[1750]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1750 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:21.523000 audit[1750]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffdcd379240 a2=0 a3=7ffdcd37922c items=0 ppid=1685 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:21.523000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:32:21.580796 kubelet[1685]: I1002 19:32:21.580750 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:32:21.581244 kubelet[1685]: E1002 19:32:21.581206 1685 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.13:6443/api/v1/nodes\": dial tcp 10.0.0.13:6443: connect: connection refused" node="localhost" Oct 2 19:32:21.681108 kubelet[1685]: E1002 19:32:21.681043 1685 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.0.0.13:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:21.782464 kubelet[1685]: I1002 19:32:21.782364 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:32:21.782740 kubelet[1685]: E1002 19:32:21.782718 1685 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.13:6443/api/v1/nodes\": dial tcp 10.0.0.13:6443: connect: connection refused" node="localhost" Oct 2 19:32:22.082467 kubelet[1685]: E1002 19:32:22.082349 1685 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.0.0.13:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.183844 kubelet[1685]: I1002 19:32:22.183811 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:32:22.184198 kubelet[1685]: E1002 19:32:22.184183 1685 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.13:6443/api/v1/nodes\": dial tcp 10.0.0.13:6443: connect: connection refused" node="localhost" Oct 2 19:32:22.432000 audit[1752]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:22.432000 audit[1752]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7fffd6345850 a2=0 a3=7fffd634583c items=0 ppid=1685 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:22.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:32:22.433759 kubelet[1685]: I1002 19:32:22.433641 1685 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:32:22.433759 kubelet[1685]: I1002 19:32:22.433661 1685 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:32:22.433759 kubelet[1685]: I1002 19:32:22.433678 1685 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:32:22.433759 kubelet[1685]: E1002 19:32:22.433752 1685 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:32:22.433000 audit[1753]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:22.433000 audit[1753]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff7a33edf0 a2=0 a3=7fff7a33eddc items=0 ppid=1685 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:22.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:32:22.434746 kubelet[1685]: W1002 19:32:22.434703 1685 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.13:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.434808 kubelet[1685]: E1002 19:32:22.434752 1685 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.13:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.434000 audit[1754]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1754 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:22.434000 audit[1754]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe964b3570 a2=0 a3=7ffe964b355c items=0 ppid=1685 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:22.434000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:32:22.435000 audit[1755]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1755 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:22.435000 audit[1755]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe752709f0 a2=0 a3=7ffe752709dc items=0 ppid=1685 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:22.435000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:32:22.469780 kubelet[1685]: I1002 19:32:22.469711 1685 policy_none.go:49] "None policy: Start" Oct 2 19:32:22.470469 kubelet[1685]: I1002 19:32:22.470449 1685 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:32:22.470532 kubelet[1685]: I1002 19:32:22.470501 1685 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:32:22.478032 systemd[1]: Created slice kubepods.slice. Oct 2 19:32:22.481250 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:32:22.484092 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:32:22.492285 kubelet[1685]: I1002 19:32:22.492256 1685 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:32:22.491000 audit[1685]: AVC avc: denied { mac_admin } for pid=1685 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:22.491000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:32:22.491000 audit[1685]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cb4bd0 a1=c000cadc38 a2=c000cb4ba0 a3=25 items=0 ppid=1 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:22.491000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:32:22.492526 kubelet[1685]: I1002 19:32:22.492320 1685 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:32:22.492526 kubelet[1685]: I1002 19:32:22.492501 1685 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:32:22.493116 kubelet[1685]: E1002 19:32:22.493083 1685 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:32:22.534224 kubelet[1685]: I1002 19:32:22.534147 1685 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:32:22.535341 kubelet[1685]: I1002 19:32:22.535318 1685 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:32:22.535957 kubelet[1685]: I1002 19:32:22.535931 1685 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:32:22.537794 kubelet[1685]: I1002 19:32:22.537746 1685 status_manager.go:698] "Failed to get status for pod" podUID=32875127a847fd0b3019686985704c10 pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.13:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.13:6443: connect: connection refused" Oct 2 19:32:22.538125 kubelet[1685]: I1002 19:32:22.538102 1685 status_manager.go:698] "Failed to get status for pod" podUID=b3fbb6a05b0456c4809ee638aa5cfabe pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.13:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.13:6443: connect: connection refused" Oct 2 19:32:22.538426 kubelet[1685]: I1002 19:32:22.538405 1685 status_manager.go:698] "Failed to get status for pod" podUID=fbbee22b6941d370b4e7de3cf42df07f pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.13:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.13:6443: connect: connection refused" Oct 2 19:32:22.540931 systemd[1]: Created slice kubepods-burstable-pod32875127a847fd0b3019686985704c10.slice. Oct 2 19:32:22.552345 systemd[1]: Created slice kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice. Oct 2 19:32:22.560098 systemd[1]: Created slice kubepods-burstable-podfbbee22b6941d370b4e7de3cf42df07f.slice. Oct 2 19:32:22.584820 kubelet[1685]: I1002 19:32:22.584785 1685 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:22.584981 kubelet[1685]: I1002 19:32:22.584847 1685 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:22.584981 kubelet[1685]: I1002 19:32:22.584902 1685 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:22.585045 kubelet[1685]: I1002 19:32:22.584976 1685 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:32:22.585045 kubelet[1685]: I1002 19:32:22.585017 1685 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:22.585118 kubelet[1685]: I1002 19:32:22.585069 1685 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/32875127a847fd0b3019686985704c10-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"32875127a847fd0b3019686985704c10\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:32:22.585188 kubelet[1685]: I1002 19:32:22.585163 1685 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/32875127a847fd0b3019686985704c10-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"32875127a847fd0b3019686985704c10\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:32:22.585259 kubelet[1685]: I1002 19:32:22.585245 1685 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:22.585295 kubelet[1685]: I1002 19:32:22.585288 1685 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/32875127a847fd0b3019686985704c10-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"32875127a847fd0b3019686985704c10\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:32:22.748820 kubelet[1685]: W1002 19:32:22.748679 1685 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.13:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.748820 kubelet[1685]: E1002 19:32:22.748734 1685 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.13:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.799761 kubelet[1685]: W1002 19:32:22.799669 1685 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.13:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.799761 kubelet[1685]: E1002 19:32:22.799763 1685 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.13:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.850906 kubelet[1685]: E1002 19:32:22.850852 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:22.851467 env[1094]: time="2023-10-02T19:32:22.851426010Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:32875127a847fd0b3019686985704c10,Namespace:kube-system,Attempt:0,}" Oct 2 19:32:22.858575 kubelet[1685]: E1002 19:32:22.858553 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:22.858896 env[1094]: time="2023-10-02T19:32:22.858864699Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,}" Oct 2 19:32:22.862152 kubelet[1685]: E1002 19:32:22.862134 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:22.862607 env[1094]: time="2023-10-02T19:32:22.862554932Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,}" Oct 2 19:32:22.883248 kubelet[1685]: E1002 19:32:22.883195 1685 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.0.0.13:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.893953 kubelet[1685]: W1002 19:32:22.893882 1685 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.13:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.893953 kubelet[1685]: E1002 19:32:22.893940 1685 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.13:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:22.985281 kubelet[1685]: I1002 19:32:22.985254 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:32:22.985606 kubelet[1685]: E1002 19:32:22.985588 1685 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.13:6443/api/v1/nodes\": dial tcp 10.0.0.13:6443: connect: connection refused" node="localhost" Oct 2 19:32:23.443478 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1838461618.mount: Deactivated successfully. Oct 2 19:32:23.450225 env[1094]: time="2023-10-02T19:32:23.450176132Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.451084 env[1094]: time="2023-10-02T19:32:23.451055307Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.453491 env[1094]: time="2023-10-02T19:32:23.453466876Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.454306 env[1094]: time="2023-10-02T19:32:23.454272380Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.459047 env[1094]: time="2023-10-02T19:32:23.459001838Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.460299 env[1094]: time="2023-10-02T19:32:23.460275102Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.461741 env[1094]: time="2023-10-02T19:32:23.461719748Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.463003 env[1094]: time="2023-10-02T19:32:23.462966061Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.464165 env[1094]: time="2023-10-02T19:32:23.464131328Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.466109 env[1094]: time="2023-10-02T19:32:23.466082780Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.467541 env[1094]: time="2023-10-02T19:32:23.467513658Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.469465 env[1094]: time="2023-10-02T19:32:23.469429212Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:23.479147 kubelet[1685]: W1002 19:32:23.479115 1685 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.13:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:23.479444 kubelet[1685]: E1002 19:32:23.479158 1685 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.13:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:23.481234 env[1094]: time="2023-10-02T19:32:23.481152123Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:32:23.481234 env[1094]: time="2023-10-02T19:32:23.481212499Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:32:23.481234 env[1094]: time="2023-10-02T19:32:23.481225435Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:32:23.481421 env[1094]: time="2023-10-02T19:32:23.481382788Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9b450ac4024569d372b29acfc97e5be8084e214d978c35605e16f12cf65bebf5 pid=1762 runtime=io.containerd.runc.v2 Oct 2 19:32:23.487903 kubelet[1685]: E1002 19:32:23.487876 1685 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.13:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.13:6443: connect: connection refused Oct 2 19:32:23.496491 systemd[1]: Started cri-containerd-9b450ac4024569d372b29acfc97e5be8084e214d978c35605e16f12cf65bebf5.scope. Oct 2 19:32:23.497000 env[1094]: time="2023-10-02T19:32:23.496433666Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:32:23.497000 env[1094]: time="2023-10-02T19:32:23.496486608Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:32:23.498121 env[1094]: time="2023-10-02T19:32:23.497968976Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:32:23.498243 env[1094]: time="2023-10-02T19:32:23.498216884Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c74b0d1a205e7c3f8b2b6f40f768140a215a94bb2fc3d2a768bda33bbf1a15a6 pid=1790 runtime=io.containerd.runc.v2 Oct 2 19:32:23.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit: BPF prog-id=67 op=LOAD Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=1762 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343530616334303234353639643337326232396163666339376535 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=c items=0 ppid=1762 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343530616334303234353639643337326232396163666339376535 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit: BPF prog-id=68 op=LOAD Oct 2 19:32:23.506000 audit[1775]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c0003a8a30 items=0 ppid=1762 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343530616334303234353639643337326232396163666339376535 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.506000 audit: BPF prog-id=69 op=LOAD Oct 2 19:32:23.506000 audit[1775]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c0003a8a78 items=0 ppid=1762 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343530616334303234353639643337326232396163666339376535 Oct 2 19:32:23.507000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:32:23.507000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.507000 audit: BPF prog-id=70 op=LOAD Oct 2 19:32:23.507000 audit[1775]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c0003a8e88 items=0 ppid=1762 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962343530616334303234353639643337326232396163666339376535 Oct 2 19:32:23.511501 env[1094]: time="2023-10-02T19:32:23.511438485Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:32:23.511501 env[1094]: time="2023-10-02T19:32:23.511479905Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:32:23.511501 env[1094]: time="2023-10-02T19:32:23.511492359Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:32:23.511759 env[1094]: time="2023-10-02T19:32:23.511676915Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d1d36a34c607641090e3f8914f7581346ed41c42d75a1b1bfc2185cf31e7ebcc pid=1824 runtime=io.containerd.runc.v2 Oct 2 19:32:23.516194 systemd[1]: Started cri-containerd-c74b0d1a205e7c3f8b2b6f40f768140a215a94bb2fc3d2a768bda33bbf1a15a6.scope. Oct 2 19:32:23.531174 systemd[1]: Started cri-containerd-d1d36a34c607641090e3f8914f7581346ed41c42d75a1b1bfc2185cf31e7ebcc.scope. Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.532000 audit: BPF prog-id=71 op=LOAD Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=1790 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337346230643161323035653763336638623262366634306637363831 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=1790 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337346230643161323035653763336638623262366634306637363831 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit: BPF prog-id=72 op=LOAD Oct 2 19:32:23.533000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0003c8810 items=0 ppid=1790 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337346230643161323035653763336638623262366634306637363831 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit: BPF prog-id=73 op=LOAD Oct 2 19:32:23.533000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0003c8858 items=0 ppid=1790 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337346230643161323035653763336638623262366634306637363831 Oct 2 19:32:23.533000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:32:23.533000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.533000 audit: BPF prog-id=74 op=LOAD Oct 2 19:32:23.533000 audit[1802]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003c8c68 items=0 ppid=1790 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337346230643161323035653763336638623262366634306637363831 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit: BPF prog-id=75 op=LOAD Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1824 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431643336613334633630373634313039306533663839313466373538 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=1824 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431643336613334633630373634313039306533663839313466373538 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.542000 audit: BPF prog-id=76 op=LOAD Oct 2 19:32:23.542000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003bcb80 items=0 ppid=1824 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431643336613334633630373634313039306533663839313466373538 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit: BPF prog-id=77 op=LOAD Oct 2 19:32:23.543000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003bcbc8 items=0 ppid=1824 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431643336613334633630373634313039306533663839313466373538 Oct 2 19:32:23.543000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:32:23.543000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.543000 audit: BPF prog-id=78 op=LOAD Oct 2 19:32:23.543000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003bcfd8 items=0 ppid=1824 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431643336613334633630373634313039306533663839313466373538 Oct 2 19:32:23.563676 env[1094]: time="2023-10-02T19:32:23.563629719Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,} returns sandbox id \"9b450ac4024569d372b29acfc97e5be8084e214d978c35605e16f12cf65bebf5\"" Oct 2 19:32:23.564310 env[1094]: time="2023-10-02T19:32:23.564280885Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,} returns sandbox id \"c74b0d1a205e7c3f8b2b6f40f768140a215a94bb2fc3d2a768bda33bbf1a15a6\"" Oct 2 19:32:23.566631 kubelet[1685]: E1002 19:32:23.566588 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:23.566955 kubelet[1685]: E1002 19:32:23.566945 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:23.569624 env[1094]: time="2023-10-02T19:32:23.569582586Z" level=info msg="CreateContainer within sandbox \"9b450ac4024569d372b29acfc97e5be8084e214d978c35605e16f12cf65bebf5\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:32:23.569870 env[1094]: time="2023-10-02T19:32:23.569582035Z" level=info msg="CreateContainer within sandbox \"c74b0d1a205e7c3f8b2b6f40f768140a215a94bb2fc3d2a768bda33bbf1a15a6\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:32:23.571703 env[1094]: time="2023-10-02T19:32:23.571663669Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:32875127a847fd0b3019686985704c10,Namespace:kube-system,Attempt:0,} returns sandbox id \"d1d36a34c607641090e3f8914f7581346ed41c42d75a1b1bfc2185cf31e7ebcc\"" Oct 2 19:32:23.572444 kubelet[1685]: E1002 19:32:23.572334 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:23.573775 env[1094]: time="2023-10-02T19:32:23.573743589Z" level=info msg="CreateContainer within sandbox \"d1d36a34c607641090e3f8914f7581346ed41c42d75a1b1bfc2185cf31e7ebcc\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:32:23.598780 env[1094]: time="2023-10-02T19:32:23.598725834Z" level=info msg="CreateContainer within sandbox \"9b450ac4024569d372b29acfc97e5be8084e214d978c35605e16f12cf65bebf5\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d6dd580bc733ab50065e38f79e132f48ef6cb3ce9a47082c3af2171a0f65140e\"" Oct 2 19:32:23.599429 env[1094]: time="2023-10-02T19:32:23.599399584Z" level=info msg="StartContainer for \"d6dd580bc733ab50065e38f79e132f48ef6cb3ce9a47082c3af2171a0f65140e\"" Oct 2 19:32:23.602259 env[1094]: time="2023-10-02T19:32:23.602229339Z" level=info msg="CreateContainer within sandbox \"d1d36a34c607641090e3f8914f7581346ed41c42d75a1b1bfc2185cf31e7ebcc\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"3e7c312ab406d55b6dd7811b6768d37ab281d5106f9ba2f0094c6938575595e2\"" Oct 2 19:32:23.602677 env[1094]: time="2023-10-02T19:32:23.602651413Z" level=info msg="StartContainer for \"3e7c312ab406d55b6dd7811b6768d37ab281d5106f9ba2f0094c6938575595e2\"" Oct 2 19:32:23.603736 env[1094]: time="2023-10-02T19:32:23.603708291Z" level=info msg="CreateContainer within sandbox \"c74b0d1a205e7c3f8b2b6f40f768140a215a94bb2fc3d2a768bda33bbf1a15a6\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"c36acebe0aa88611b0657107a7a37f804c5b1df0130f5fd7653ac4e1b4e3501d\"" Oct 2 19:32:23.604097 env[1094]: time="2023-10-02T19:32:23.604068866Z" level=info msg="StartContainer for \"c36acebe0aa88611b0657107a7a37f804c5b1df0130f5fd7653ac4e1b4e3501d\"" Oct 2 19:32:23.617022 systemd[1]: Started cri-containerd-d6dd580bc733ab50065e38f79e132f48ef6cb3ce9a47082c3af2171a0f65140e.scope. Oct 2 19:32:23.619337 systemd[1]: Started cri-containerd-c36acebe0aa88611b0657107a7a37f804c5b1df0130f5fd7653ac4e1b4e3501d.scope. Oct 2 19:32:23.624914 systemd[1]: Started cri-containerd-3e7c312ab406d55b6dd7811b6768d37ab281d5106f9ba2f0094c6938575595e2.scope. Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit: BPF prog-id=79 op=LOAD Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1762 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646435383062633733336162353030363565333866373965313332 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1762 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646435383062633733336162353030363565333866373965313332 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.631000 audit: BPF prog-id=80 op=LOAD Oct 2 19:32:23.631000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000025310 items=0 ppid=1762 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646435383062633733336162353030363565333866373965313332 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit: BPF prog-id=81 op=LOAD Oct 2 19:32:23.632000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000025358 items=0 ppid=1762 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646435383062633733336162353030363565333866373965313332 Oct 2 19:32:23.632000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:32:23.632000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.632000 audit: BPF prog-id=82 op=LOAD Oct 2 19:32:23.632000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000025768 items=0 ppid=1762 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646435383062633733336162353030363565333866373965313332 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit: BPF prog-id=83 op=LOAD Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1824 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.636000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365376333313261623430366435356236646437383131623637363864 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1824 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.636000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365376333313261623430366435356236646437383131623637363864 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit: BPF prog-id=84 op=LOAD Oct 2 19:32:23.636000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000285870 items=0 ppid=1824 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.636000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365376333313261623430366435356236646437383131623637363864 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit: BPF prog-id=85 op=LOAD Oct 2 19:32:23.636000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002858b8 items=0 ppid=1824 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.636000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365376333313261623430366435356236646437383131623637363864 Oct 2 19:32:23.636000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:32:23.636000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.636000 audit: BPF prog-id=86 op=LOAD Oct 2 19:32:23.636000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000285cc8 items=0 ppid=1824 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.636000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365376333313261623430366435356236646437383131623637363864 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.642000 audit: BPF prog-id=87 op=LOAD Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=1790 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366163656265306161383836313162303635373130376137613337 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=1790 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366163656265306161383836313162303635373130376137613337 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit: BPF prog-id=88 op=LOAD Oct 2 19:32:23.643000 audit[1911]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0003b0910 items=0 ppid=1790 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366163656265306161383836313162303635373130376137613337 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit: BPF prog-id=89 op=LOAD Oct 2 19:32:23.643000 audit[1911]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0003b0958 items=0 ppid=1790 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366163656265306161383836313162303635373130376137613337 Oct 2 19:32:23.643000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:32:23.643000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { perfmon } for pid=1911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit[1911]: AVC avc: denied { bpf } for pid=1911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:23.643000 audit: BPF prog-id=90 op=LOAD Oct 2 19:32:23.643000 audit[1911]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0003b0d68 items=0 ppid=1790 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:23.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366163656265306161383836313162303635373130376137613337 Oct 2 19:32:23.663179 env[1094]: time="2023-10-02T19:32:23.662991007Z" level=info msg="StartContainer for \"d6dd580bc733ab50065e38f79e132f48ef6cb3ce9a47082c3af2171a0f65140e\" returns successfully" Oct 2 19:32:23.666138 env[1094]: time="2023-10-02T19:32:23.666102546Z" level=info msg="StartContainer for \"3e7c312ab406d55b6dd7811b6768d37ab281d5106f9ba2f0094c6938575595e2\" returns successfully" Oct 2 19:32:23.679058 env[1094]: time="2023-10-02T19:32:23.679011865Z" level=info msg="StartContainer for \"c36acebe0aa88611b0657107a7a37f804c5b1df0130f5fd7653ac4e1b4e3501d\" returns successfully" Oct 2 19:32:24.374000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:24.374000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00040e2a0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:32:24.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:24.374000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:24.374000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0009bc020 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:32:24.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:24.440850 kubelet[1685]: E1002 19:32:24.440548 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:24.442255 kubelet[1685]: E1002 19:32:24.442241 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:24.443446 kubelet[1685]: E1002 19:32:24.443424 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:24.587297 kubelet[1685]: I1002 19:32:24.587274 1685 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:32:25.051000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:25.051000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0029eea00 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:32:25.051000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:25.051000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c000be6000 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:32:25.051000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:32:25.051000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7069 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:25.051000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c000be61e0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:32:25.051000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:32:25.051000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:32:25.053000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7075 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:25.053000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c000be69f0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:32:25.053000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:32:25.056000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:25.056000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0009544e0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:32:25.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:32:25.056000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:25.056000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c000fa9b30 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:32:25.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:32:25.081317 kubelet[1685]: E1002 19:32:25.081268 1685 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:32:25.177104 kubelet[1685]: I1002 19:32:25.177054 1685 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:32:25.271187 kubelet[1685]: E1002 19:32:25.271140 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:32:25.371612 kubelet[1685]: E1002 19:32:25.371563 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:32:25.445695 kubelet[1685]: E1002 19:32:25.445665 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:25.445916 kubelet[1685]: E1002 19:32:25.445894 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:25.446818 kubelet[1685]: E1002 19:32:25.446790 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:25.471762 kubelet[1685]: E1002 19:32:25.471686 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:32:25.572797 kubelet[1685]: E1002 19:32:25.572725 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:32:25.673397 kubelet[1685]: E1002 19:32:25.673266 1685 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:32:25.737534 kubelet[1685]: E1002 19:32:25.737444 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a614100d3b1ad", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 473055149, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 473055149, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:25.790659 kubelet[1685]: E1002 19:32:25.790557 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a614100f15be2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 474999266, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 474999266, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:25.843730 kubelet[1685]: E1002 19:32:25.843648 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6141026280e0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499191520, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499191520, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:25.897746 kubelet[1685]: E1002 19:32:25.897642 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a61410262a636", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499201078, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499201078, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:25.951995 kubelet[1685]: E1002 19:32:25.951829 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a61410262b914", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499205908, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499205908, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:26.007694 kubelet[1685]: E1002 19:32:26.007586 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6141026280e0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499191520, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 580703853, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:26.137681 kubelet[1685]: E1002 19:32:26.137528 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a61410262a636", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499201078, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 580713020, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:26.193619 kubelet[1685]: E1002 19:32:26.193493 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a61410262b914", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499205908, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 580718600, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:26.475112 kubelet[1685]: I1002 19:32:26.475072 1685 apiserver.go:52] "Watching apiserver" Oct 2 19:32:26.478209 kubelet[1685]: I1002 19:32:26.478187 1685 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:32:26.498372 kubelet[1685]: E1002 19:32:26.498286 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6141026280e0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499191520, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 782316756, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:26.500529 kubelet[1685]: E1002 19:32:26.500503 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:26.508121 kubelet[1685]: I1002 19:32:26.508072 1685 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:32:26.555213 kubelet[1685]: E1002 19:32:26.555172 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:26.737771 kubelet[1685]: E1002 19:32:26.737568 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a61410262a636", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499201078, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 782325323, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:27.199534 kubelet[1685]: E1002 19:32:27.199369 1685 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a61410262b914", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 499205908, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 32, 21, 782327788, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:32:27.447189 kubelet[1685]: E1002 19:32:27.447149 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:27.447382 kubelet[1685]: E1002 19:32:27.447352 1685 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:28.744029 systemd[1]: Reloading. Oct 2 19:32:28.812172 /usr/lib/systemd/system-generators/torcx-generator[2020]: time="2023-10-02T19:32:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:32:28.812207 /usr/lib/systemd/system-generators/torcx-generator[2020]: time="2023-10-02T19:32:28Z" level=info msg="torcx already run" Oct 2 19:32:28.866270 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:32:28.866288 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:32:28.885463 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:32:28.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.966879 kernel: kauditd_printk_skb: 639 callbacks suppressed Oct 2 19:32:28.966948 kernel: audit: type=1400 audit(1696275148.965:726): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970615 kernel: audit: type=1400 audit(1696275148.965:727): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970667 kernel: audit: type=1400 audit(1696275148.965:728): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974321 kernel: audit: type=1400 audit(1696275148.965:729): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974365 kernel: audit: type=1400 audit(1696275148.965:730): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978935 kernel: audit: type=1400 audit(1696275148.965:731): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978987 kernel: audit: type=1400 audit(1696275148.965:732): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.980782 kernel: audit: type=1400 audit(1696275148.965:733): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.982623 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:32:28.982664 kernel: audit: type=1400 audit(1696275148.965:734): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.968000 audit: BPF prog-id=91 op=LOAD Oct 2 19:32:28.968000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:32:28.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970000 audit: BPF prog-id=92 op=LOAD Oct 2 19:32:28.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.973000 audit: BPF prog-id=93 op=LOAD Oct 2 19:32:28.973000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:32:28.973000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:32:28.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit: BPF prog-id=94 op=LOAD Oct 2 19:32:28.976000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit: BPF prog-id=95 op=LOAD Oct 2 19:32:28.978000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.980000 audit: BPF prog-id=96 op=LOAD Oct 2 19:32:28.980000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:32:28.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit: BPF prog-id=97 op=LOAD Oct 2 19:32:28.984000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit: BPF prog-id=98 op=LOAD Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.984000 audit: BPF prog-id=99 op=LOAD Oct 2 19:32:28.984000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:32:28.984000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit: BPF prog-id=100 op=LOAD Oct 2 19:32:28.985000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.985000 audit: BPF prog-id=101 op=LOAD Oct 2 19:32:28.985000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.986000 audit: BPF prog-id=102 op=LOAD Oct 2 19:32:28.986000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.987000 audit: BPF prog-id=103 op=LOAD Oct 2 19:32:28.987000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit: BPF prog-id=104 op=LOAD Oct 2 19:32:28.988000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit: BPF prog-id=105 op=LOAD Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.988000 audit: BPF prog-id=106 op=LOAD Oct 2 19:32:28.988000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:32:28.988000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit: BPF prog-id=107 op=LOAD Oct 2 19:32:28.989000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.989000 audit: BPF prog-id=108 op=LOAD Oct 2 19:32:28.989000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit: BPF prog-id=109 op=LOAD Oct 2 19:32:28.991000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit: BPF prog-id=110 op=LOAD Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:28.991000 audit: BPF prog-id=111 op=LOAD Oct 2 19:32:28.991000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:32:28.991000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:32:29.001529 kubelet[1685]: I1002 19:32:29.001407 1685 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:32:29.002742 systemd[1]: Stopping kubelet.service... Oct 2 19:32:29.019894 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:32:29.020100 systemd[1]: Stopped kubelet.service. Oct 2 19:32:29.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.021832 systemd[1]: Started kubelet.service. Oct 2 19:32:29.074117 kubelet[2060]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:32:29.074117 kubelet[2060]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:32:29.074578 kubelet[2060]: I1002 19:32:29.074130 2060 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:32:29.076631 kubelet[2060]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:32:29.076631 kubelet[2060]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:32:29.078746 kubelet[2060]: I1002 19:32:29.078709 2060 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:32:29.078746 kubelet[2060]: I1002 19:32:29.078736 2060 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:32:29.078944 kubelet[2060]: I1002 19:32:29.078926 2060 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:32:29.080024 kubelet[2060]: I1002 19:32:29.080002 2060 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:32:29.080744 kubelet[2060]: I1002 19:32:29.080709 2060 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:32:29.083984 kubelet[2060]: I1002 19:32:29.083933 2060 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:32:29.084237 kubelet[2060]: I1002 19:32:29.084205 2060 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:32:29.084372 kubelet[2060]: I1002 19:32:29.084287 2060 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:32:29.084372 kubelet[2060]: I1002 19:32:29.084323 2060 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:32:29.084372 kubelet[2060]: I1002 19:32:29.084336 2060 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:32:29.084372 kubelet[2060]: I1002 19:32:29.084375 2060 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:32:29.087529 kubelet[2060]: I1002 19:32:29.087508 2060 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:32:29.088367 kubelet[2060]: I1002 19:32:29.088340 2060 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:32:29.088427 kubelet[2060]: I1002 19:32:29.088384 2060 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:32:29.088460 kubelet[2060]: I1002 19:32:29.088432 2060 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:32:29.092763 kubelet[2060]: I1002 19:32:29.090074 2060 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:32:29.092763 kubelet[2060]: I1002 19:32:29.091951 2060 server.go:1186] "Started kubelet" Oct 2 19:32:29.093000 audit[2060]: AVC avc: denied { mac_admin } for pid=2060 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:29.093000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:32:29.093000 audit[2060]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0001f99b0 a1=c00005d818 a2=c0001f9980 a3=25 items=0 ppid=1 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:29.093000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:32:29.093000 audit[2060]: AVC avc: denied { mac_admin } for pid=2060 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:29.093000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:32:29.093000 audit[2060]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001098020 a1=c00005d830 a2=c0001f9a40 a3=25 items=0 ppid=1 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:29.093000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:32:29.094677 kubelet[2060]: I1002 19:32:29.094264 2060 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:32:29.094677 kubelet[2060]: I1002 19:32:29.094320 2060 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:32:29.094677 kubelet[2060]: I1002 19:32:29.094346 2060 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:32:29.095526 kubelet[2060]: I1002 19:32:29.095514 2060 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:32:29.097925 kubelet[2060]: I1002 19:32:29.097895 2060 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:32:29.098572 kubelet[2060]: I1002 19:32:29.098501 2060 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:32:29.098661 kubelet[2060]: I1002 19:32:29.098637 2060 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:32:29.112500 kubelet[2060]: E1002 19:32:29.103187 2060 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:32:29.112500 kubelet[2060]: E1002 19:32:29.103223 2060 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:32:29.139822 kubelet[2060]: I1002 19:32:29.139778 2060 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:32:29.144939 kubelet[2060]: I1002 19:32:29.144919 2060 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:32:29.144939 kubelet[2060]: I1002 19:32:29.144939 2060 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:32:29.145056 kubelet[2060]: I1002 19:32:29.144963 2060 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:32:29.145230 kubelet[2060]: I1002 19:32:29.145216 2060 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:32:29.145293 kubelet[2060]: I1002 19:32:29.145238 2060 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:32:29.145293 kubelet[2060]: I1002 19:32:29.145249 2060 policy_none.go:49] "None policy: Start" Oct 2 19:32:29.145944 kubelet[2060]: I1002 19:32:29.145927 2060 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:32:29.145997 kubelet[2060]: I1002 19:32:29.145950 2060 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:32:29.146094 kubelet[2060]: I1002 19:32:29.146080 2060 state_mem.go:75] "Updated machine memory state" Oct 2 19:32:29.152035 kubelet[2060]: I1002 19:32:29.151993 2060 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:32:29.151000 audit[2060]: AVC avc: denied { mac_admin } for pid=2060 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:29.151000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:32:29.151000 audit[2060]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c6a120 a1=c001140060 a2=c000c6a0f0 a3=25 items=0 ppid=1 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:29.151000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:32:29.152378 kubelet[2060]: I1002 19:32:29.152068 2060 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:32:29.152378 kubelet[2060]: I1002 19:32:29.152289 2060 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:32:29.157931 kubelet[2060]: I1002 19:32:29.157727 2060 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:32:29.157931 kubelet[2060]: I1002 19:32:29.157749 2060 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:32:29.157931 kubelet[2060]: I1002 19:32:29.157769 2060 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:32:29.157931 kubelet[2060]: E1002 19:32:29.157813 2060 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:32:29.163191 kubelet[2060]: I1002 19:32:29.163088 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:32:29.163191 kubelet[2060]: I1002 19:32:29.163115 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:32:29.164098 kubelet[2060]: I1002 19:32:29.164084 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:32:29.165401 kubelet[2060]: I1002 19:32:29.165343 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7" size=102542580 Oct 2 19:32:29.165641 env[1094]: time="2023-10-02T19:32:29.165581062Z" level=info msg="RemoveImage \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:32:29.168855 env[1094]: time="2023-10-02T19:32:29.168834567Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.6-0,XXX_unrecognized:[],}" Oct 2 19:32:29.171790 env[1094]: time="2023-10-02T19:32:29.171734033Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,XXX_unrecognized:[],}" Oct 2 19:32:29.174290 env[1094]: time="2023-10-02T19:32:29.174225177Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,XXX_unrecognized:[],}" Oct 2 19:32:29.203814 kubelet[2060]: I1002 19:32:29.203787 2060 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:32:29.216000 audit[2115]: USER_ACCT pid=2115 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.216000 audit[2115]: CRED_REFR pid=2115 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.216947 sudo[2115]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:32:29.217103 sudo[2115]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:32:29.218000 audit[2115]: USER_START pid=2115 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.245684 env[1094]: time="2023-10-02T19:32:29.245115679Z" level=info msg="RemoveImage \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\" returns successfully" Oct 2 19:32:29.245807 kubelet[2060]: I1002 19:32:29.245519 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" size=301773 Oct 2 19:32:29.245846 env[1094]: time="2023-10-02T19:32:29.245788168Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\"" Oct 2 19:32:29.258288 kubelet[2060]: I1002 19:32:29.258198 2060 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:32:29.258288 kubelet[2060]: I1002 19:32:29.258273 2060 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:32:29.258395 kubelet[2060]: I1002 19:32:29.258298 2060 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:32:29.299138 kubelet[2060]: I1002 19:32:29.299108 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/32875127a847fd0b3019686985704c10-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"32875127a847fd0b3019686985704c10\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:32:29.299138 kubelet[2060]: I1002 19:32:29.299141 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/32875127a847fd0b3019686985704c10-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"32875127a847fd0b3019686985704c10\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:32:29.299348 kubelet[2060]: I1002 19:32:29.299174 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:29.299348 kubelet[2060]: I1002 19:32:29.299223 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:32:29.299348 kubelet[2060]: I1002 19:32:29.299265 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/32875127a847fd0b3019686985704c10-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"32875127a847fd0b3019686985704c10\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:32:29.299348 kubelet[2060]: I1002 19:32:29.299322 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:29.299438 kubelet[2060]: I1002 19:32:29.299351 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:29.299438 kubelet[2060]: I1002 19:32:29.299378 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:29.299438 kubelet[2060]: I1002 19:32:29.299408 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:29.329747 env[1094]: time="2023-10-02T19:32:29.329693973Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:32:29.331328 env[1094]: time="2023-10-02T19:32:29.331263591Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:32:29.333956 env[1094]: time="2023-10-02T19:32:29.332949060Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,XXX_unrecognized:[],}" Oct 2 19:32:29.335503 kubelet[2060]: I1002 19:32:29.335436 2060 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:32:29.335636 kubelet[2060]: I1002 19:32:29.335553 2060 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:32:29.336359 kubelet[2060]: E1002 19:32:29.336340 2060 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:32:29.336468 kubelet[2060]: E1002 19:32:29.336451 2060 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:29.337360 env[1094]: time="2023-10-02T19:32:29.337293947Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\" returns successfully" Oct 2 19:32:29.337653 kubelet[2060]: I1002 19:32:29.337492 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:200132c1d91abbe4da0942bfc92953fa5122c8fdf6f6156cf3d60d73fbf7f881" size=17678102 Oct 2 19:32:29.337749 env[1094]: time="2023-10-02T19:32:29.337717158Z" level=info msg="RemoveImage \"sha256:200132c1d91abbe4da0942bfc92953fa5122c8fdf6f6156cf3d60d73fbf7f881\"" Oct 2 19:32:29.342218 env[1094]: time="2023-10-02T19:32:29.342180903Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-scheduler:v1.26.5,XXX_unrecognized:[],}" Oct 2 19:32:29.342422 env[1094]: time="2023-10-02T19:32:29.342397197Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-scheduler@sha256:a3938384e78f260c79dc84e9149bb5d429e817fa9c6905c1471a1e14db527aab,XXX_unrecognized:[],}" Oct 2 19:32:29.343540 env[1094]: time="2023-10-02T19:32:29.343340184Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:200132c1d91abbe4da0942bfc92953fa5122c8fdf6f6156cf3d60d73fbf7f881,XXX_unrecognized:[],}" Oct 2 19:32:29.354293 env[1094]: time="2023-10-02T19:32:29.354224994Z" level=info msg="RemoveImage \"sha256:200132c1d91abbe4da0942bfc92953fa5122c8fdf6f6156cf3d60d73fbf7f881\" returns successfully" Oct 2 19:32:29.354583 kubelet[2060]: I1002 19:32:29.354554 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:08440588500d7e7153a0adc35d11bfba3387785503a8e5c466e92583ef4a0ce9" size=21547189 Oct 2 19:32:29.354895 env[1094]: time="2023-10-02T19:32:29.354850752Z" level=info msg="RemoveImage \"sha256:08440588500d7e7153a0adc35d11bfba3387785503a8e5c466e92583ef4a0ce9\"" Oct 2 19:32:29.356094 env[1094]: time="2023-10-02T19:32:29.356057154Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-proxy:v1.26.5,XXX_unrecognized:[],}" Oct 2 19:32:29.356903 env[1094]: time="2023-10-02T19:32:29.356870763Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-proxy@sha256:c9df3c07cfe4791905060417fefc09c5b8010ee2b46c13f27015c3f9d4397b6c,XXX_unrecognized:[],}" Oct 2 19:32:29.357875 env[1094]: time="2023-10-02T19:32:29.357846644Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:08440588500d7e7153a0adc35d11bfba3387785503a8e5c466e92583ef4a0ce9,XXX_unrecognized:[],}" Oct 2 19:32:29.365425 env[1094]: time="2023-10-02T19:32:29.365363308Z" level=info msg="RemoveImage \"sha256:08440588500d7e7153a0adc35d11bfba3387785503a8e5c466e92583ef4a0ce9\" returns successfully" Oct 2 19:32:29.365700 kubelet[2060]: I1002 19:32:29.365670 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a" size=14837849 Oct 2 19:32:29.365990 env[1094]: time="2023-10-02T19:32:29.365941757Z" level=info msg="RemoveImage \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:32:29.367160 env[1094]: time="2023-10-02T19:32:29.367133050Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.9.3,XXX_unrecognized:[],}" Oct 2 19:32:29.368049 env[1094]: time="2023-10-02T19:32:29.368012896Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,XXX_unrecognized:[],}" Oct 2 19:32:29.368789 env[1094]: time="2023-10-02T19:32:29.368766971Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,XXX_unrecognized:[],}" Oct 2 19:32:29.383335 env[1094]: time="2023-10-02T19:32:29.383260717Z" level=info msg="RemoveImage \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\" returns successfully" Oct 2 19:32:29.383631 kubelet[2060]: I1002 19:32:29.383576 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:a7403c147a51687e0eb59abd270d501f243bc565f45f969ef44b71c16d043de6" size=32367033 Oct 2 19:32:29.383961 env[1094]: time="2023-10-02T19:32:29.383922144Z" level=info msg="RemoveImage \"sha256:a7403c147a51687e0eb59abd270d501f243bc565f45f969ef44b71c16d043de6\"" Oct 2 19:32:29.385371 env[1094]: time="2023-10-02T19:32:29.385340131Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-controller-manager:v1.26.5,XXX_unrecognized:[],}" Oct 2 19:32:29.386280 env[1094]: time="2023-10-02T19:32:29.386249865Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-controller-manager@sha256:a6457911fa41c7706fa1aca6cb50352b1c3e90b70c9707f1e0b6363d3188b81a,XXX_unrecognized:[],}" Oct 2 19:32:29.387521 env[1094]: time="2023-10-02T19:32:29.387486464Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:a7403c147a51687e0eb59abd270d501f243bc565f45f969ef44b71c16d043de6,XXX_unrecognized:[],}" Oct 2 19:32:29.394512 env[1094]: time="2023-10-02T19:32:29.394471791Z" level=info msg="RemoveImage \"sha256:a7403c147a51687e0eb59abd270d501f243bc565f45f969ef44b71c16d043de6\" returns successfully" Oct 2 19:32:29.394822 kubelet[2060]: I1002 19:32:29.394782 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:25c2ecde661fc1a43c73f77464f3359f334da94d49c56474084dee00bcdc6146" size=35516748 Oct 2 19:32:29.395099 env[1094]: time="2023-10-02T19:32:29.395053215Z" level=info msg="RemoveImage \"sha256:25c2ecde661fc1a43c73f77464f3359f334da94d49c56474084dee00bcdc6146\"" Oct 2 19:32:29.396315 env[1094]: time="2023-10-02T19:32:29.396274947Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-apiserver:v1.26.5,XXX_unrecognized:[],}" Oct 2 19:32:29.397101 env[1094]: time="2023-10-02T19:32:29.397080471Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-apiserver@sha256:6f89f3e9107e1b7010975137d072d601286d15fb64f572846a4145b9b0e0fc55,XXX_unrecognized:[],}" Oct 2 19:32:29.397990 env[1094]: time="2023-10-02T19:32:29.397959175Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:25c2ecde661fc1a43c73f77464f3359f334da94d49c56474084dee00bcdc6146,XXX_unrecognized:[],}" Oct 2 19:32:29.405080 env[1094]: time="2023-10-02T19:32:29.405030575Z" level=info msg="RemoveImage \"sha256:25c2ecde661fc1a43c73f77464f3359f334da94d49c56474084dee00bcdc6146\" returns successfully" Oct 2 19:32:29.405325 kubelet[2060]: I1002 19:32:29.405281 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad" size=21769909 Oct 2 19:32:29.405622 env[1094]: time="2023-10-02T19:32:29.405574609Z" level=info msg="RemoveImage \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:32:29.406566 env[1094]: time="2023-10-02T19:32:29.406542382Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-proxy:v1.26.9,XXX_unrecognized:[],}" Oct 2 19:32:29.407413 env[1094]: time="2023-10-02T19:32:29.407374899Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,XXX_unrecognized:[],}" Oct 2 19:32:29.408012 env[1094]: time="2023-10-02T19:32:29.407987803Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,XXX_unrecognized:[],}" Oct 2 19:32:29.445339 env[1094]: time="2023-10-02T19:32:29.445269168Z" level=info msg="RemoveImage \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\" returns successfully" Oct 2 19:32:29.453117 kubelet[2060]: I1002 19:32:29.453092 2060 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:32:29.492678 kubelet[2060]: E1002 19:32:29.492626 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:29.564000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32618 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:32:29.564000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f31c80 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:32:29.564000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:29.600000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:29.600000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000eee020 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:32:29.600000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:29.600000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:29.600000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000eee160 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:32:29.600000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:29.602000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:29.602000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:29.602000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0001a6300 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:32:29.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:29.602000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000eef740 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:32:29.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:29.638010 kubelet[2060]: E1002 19:32:29.637972 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:29.638549 kubelet[2060]: E1002 19:32:29.638526 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:29.709366 sudo[2115]: pam_unix(sudo:session): session closed for user root Oct 2 19:32:29.708000 audit[2115]: USER_END pid=2115 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:32:29.708000 audit[2115]: CRED_DISP pid=2115 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:32:30.088801 kubelet[2060]: I1002 19:32:30.088748 2060 apiserver.go:52] "Watching apiserver" Oct 2 19:32:30.099098 kubelet[2060]: I1002 19:32:30.099046 2060 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:32:30.104198 kubelet[2060]: I1002 19:32:30.104171 2060 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:32:30.494144 kubelet[2060]: E1002 19:32:30.494029 2060 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:32:30.494568 kubelet[2060]: E1002 19:32:30.494554 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:30.692715 kubelet[2060]: E1002 19:32:30.692678 2060 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:32:30.693211 kubelet[2060]: E1002 19:32:30.693195 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:30.722877 sudo[1218]: pam_unix(sudo:session): session closed for user root Oct 2 19:32:30.722000 audit[1218]: USER_END pid=1218 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:32:30.722000 audit[1218]: CRED_DISP pid=1218 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:32:30.724116 sshd[1214]: pam_unix(sshd:session): session closed for user core Oct 2 19:32:30.724000 audit[1214]: USER_END pid=1214 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.724000 audit[1214]: CRED_DISP pid=1214 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:32:30.726477 systemd[1]: sshd@6-10.0.0.13:22-10.0.0.1:37104.service: Deactivated successfully. Oct 2 19:32:30.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.13:22-10.0.0.1:37104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:30.727073 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:32:30.727201 systemd[1]: session-7.scope: Consumed 3.748s CPU time. Oct 2 19:32:30.727564 systemd-logind[1077]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:32:30.728139 systemd-logind[1077]: Removed session 7. Oct 2 19:32:30.894803 kubelet[2060]: E1002 19:32:30.894769 2060 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:32:30.895114 kubelet[2060]: E1002 19:32:30.895083 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:31.100507 kubelet[2060]: I1002 19:32:31.100462 2060 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=5.100408005 pod.CreationTimestamp="2023-10-02 19:32:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:32:31.100369041 +0000 UTC m=+2.073689918" watchObservedRunningTime="2023-10-02 19:32:31.100408005 +0000 UTC m=+2.073728882" Oct 2 19:32:31.166849 kubelet[2060]: E1002 19:32:31.166725 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:31.167090 kubelet[2060]: E1002 19:32:31.167017 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:31.167350 kubelet[2060]: E1002 19:32:31.167317 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:31.893877 kubelet[2060]: I1002 19:32:31.893843 2060 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=5.893809467 pod.CreationTimestamp="2023-10-02 19:32:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:32:31.655798928 +0000 UTC m=+2.629119805" watchObservedRunningTime="2023-10-02 19:32:31.893809467 +0000 UTC m=+2.867130344" Oct 2 19:32:32.168180 kubelet[2060]: E1002 19:32:32.168059 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:33.245897 kubelet[2060]: E1002 19:32:33.245858 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:33.404274 kubelet[2060]: I1002 19:32:33.401034 2060 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=4.400973414 pod.CreationTimestamp="2023-10-02 19:32:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:32:31.894163675 +0000 UTC m=+2.867484573" watchObservedRunningTime="2023-10-02 19:32:33.400973414 +0000 UTC m=+4.374294291" Oct 2 19:32:34.171393 kubelet[2060]: E1002 19:32:34.171324 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:34.819740 kubelet[2060]: E1002 19:32:34.819703 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:35.173690 kubelet[2060]: E1002 19:32:35.172865 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:36.177262 kubelet[2060]: E1002 19:32:36.176386 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:42.037615 kubelet[2060]: E1002 19:32:42.037552 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:42.487396 kubelet[2060]: I1002 19:32:42.487007 2060 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:32:42.488028 env[1094]: time="2023-10-02T19:32:42.487881193Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:32:42.489497 kubelet[2060]: I1002 19:32:42.488966 2060 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:32:42.614021 kubelet[2060]: I1002 19:32:42.613983 2060 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:32:42.639136 systemd[1]: Created slice kubepods-besteffort-pod05e5fcff_d58c_49db_afed_be48fc9ecc97.slice. Oct 2 19:32:42.653450 kubelet[2060]: I1002 19:32:42.653038 2060 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:32:42.692763 systemd[1]: Created slice kubepods-burstable-pod59fe0e9b_3ccd_4afd_b658_8ce2630334e3.slice. Oct 2 19:32:42.754862 kubelet[2060]: I1002 19:32:42.750737 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/05e5fcff-d58c-49db-afed-be48fc9ecc97-lib-modules\") pod \"kube-proxy-5q9bs\" (UID: \"05e5fcff-d58c-49db-afed-be48fc9ecc97\") " pod="kube-system/kube-proxy-5q9bs" Oct 2 19:32:42.754862 kubelet[2060]: I1002 19:32:42.750887 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/05e5fcff-d58c-49db-afed-be48fc9ecc97-kube-proxy\") pod \"kube-proxy-5q9bs\" (UID: \"05e5fcff-d58c-49db-afed-be48fc9ecc97\") " pod="kube-system/kube-proxy-5q9bs" Oct 2 19:32:42.754862 kubelet[2060]: I1002 19:32:42.750923 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/05e5fcff-d58c-49db-afed-be48fc9ecc97-xtables-lock\") pod \"kube-proxy-5q9bs\" (UID: \"05e5fcff-d58c-49db-afed-be48fc9ecc97\") " pod="kube-system/kube-proxy-5q9bs" Oct 2 19:32:42.754862 kubelet[2060]: I1002 19:32:42.750951 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c8jhv\" (UniqueName: \"kubernetes.io/projected/05e5fcff-d58c-49db-afed-be48fc9ecc97-kube-api-access-c8jhv\") pod \"kube-proxy-5q9bs\" (UID: \"05e5fcff-d58c-49db-afed-be48fc9ecc97\") " pod="kube-system/kube-proxy-5q9bs" Oct 2 19:32:42.853641 kubelet[2060]: I1002 19:32:42.853579 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-hostproc\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.853906 kubelet[2060]: I1002 19:32:42.853888 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-cgroup\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.854032 kubelet[2060]: I1002 19:32:42.854016 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-xtables-lock\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.854149 kubelet[2060]: I1002 19:32:42.854132 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pwhbg\" (UniqueName: \"kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-kube-api-access-pwhbg\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.854263 kubelet[2060]: I1002 19:32:42.854248 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-bpf-maps\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.854463 kubelet[2060]: I1002 19:32:42.854449 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cni-path\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.854577 kubelet[2060]: I1002 19:32:42.854561 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-lib-modules\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.854730 kubelet[2060]: I1002 19:32:42.854715 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-etc-cni-netd\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.854867 kubelet[2060]: I1002 19:32:42.854851 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-host-proc-sys-net\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.855004 kubelet[2060]: I1002 19:32:42.854988 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-clustermesh-secrets\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.855124 kubelet[2060]: I1002 19:32:42.855108 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-host-proc-sys-kernel\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.855246 kubelet[2060]: I1002 19:32:42.855229 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-hubble-tls\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.855393 kubelet[2060]: I1002 19:32:42.855367 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-run\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.856184 kubelet[2060]: I1002 19:32:42.855519 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-config-path\") pod \"cilium-wbdgd\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " pod="kube-system/cilium-wbdgd" Oct 2 19:32:42.886914 kubelet[2060]: E1002 19:32:42.886873 2060 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:32:42.887160 kubelet[2060]: E1002 19:32:42.887143 2060 projected.go:198] Error preparing data for projected volume kube-api-access-c8jhv for pod kube-system/kube-proxy-5q9bs: configmap "kube-root-ca.crt" not found Oct 2 19:32:42.887323 kubelet[2060]: E1002 19:32:42.887306 2060 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/05e5fcff-d58c-49db-afed-be48fc9ecc97-kube-api-access-c8jhv podName:05e5fcff-d58c-49db-afed-be48fc9ecc97 nodeName:}" failed. No retries permitted until 2023-10-02 19:32:43.387279137 +0000 UTC m=+14.360600014 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-c8jhv" (UniqueName: "kubernetes.io/projected/05e5fcff-d58c-49db-afed-be48fc9ecc97-kube-api-access-c8jhv") pod "kube-proxy-5q9bs" (UID: "05e5fcff-d58c-49db-afed-be48fc9ecc97") : configmap "kube-root-ca.crt" not found Oct 2 19:32:43.085655 kubelet[2060]: E1002 19:32:43.074174 2060 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:32:43.085655 kubelet[2060]: E1002 19:32:43.074212 2060 projected.go:198] Error preparing data for projected volume kube-api-access-pwhbg for pod kube-system/cilium-wbdgd: configmap "kube-root-ca.crt" not found Oct 2 19:32:43.085655 kubelet[2060]: E1002 19:32:43.074271 2060 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-kube-api-access-pwhbg podName:59fe0e9b-3ccd-4afd-b658-8ce2630334e3 nodeName:}" failed. No retries permitted until 2023-10-02 19:32:43.574248081 +0000 UTC m=+14.547568968 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-pwhbg" (UniqueName: "kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-kube-api-access-pwhbg") pod "cilium-wbdgd" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3") : configmap "kube-root-ca.crt" not found Oct 2 19:32:43.596982 kubelet[2060]: E1002 19:32:43.596963 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:43.619476 env[1094]: time="2023-10-02T19:32:43.611750429Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5q9bs,Uid:05e5fcff-d58c-49db-afed-be48fc9ecc97,Namespace:kube-system,Attempt:0,}" Oct 2 19:32:43.756630 kubelet[2060]: I1002 19:32:43.755017 2060 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:32:43.787425 systemd[1]: Created slice kubepods-besteffort-pod4f26db9f_1d33_4cb5_a1cb_304eda8dda4d.slice. Oct 2 19:32:43.806559 kubelet[2060]: I1002 19:32:43.806183 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-jrbr8\" (UID: \"4f26db9f-1d33-4cb5-a1cb-304eda8dda4d\") " pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:32:43.806559 kubelet[2060]: I1002 19:32:43.806277 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bc8hj\" (UniqueName: \"kubernetes.io/projected/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d-kube-api-access-bc8hj\") pod \"cilium-operator-f59cbd8c6-jrbr8\" (UID: \"4f26db9f-1d33-4cb5-a1cb-304eda8dda4d\") " pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:32:43.900494 kubelet[2060]: E1002 19:32:43.899693 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:43.904432 env[1094]: time="2023-10-02T19:32:43.902298119Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wbdgd,Uid:59fe0e9b-3ccd-4afd-b658-8ce2630334e3,Namespace:kube-system,Attempt:0,}" Oct 2 19:32:44.098047 kubelet[2060]: E1002 19:32:44.096841 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:44.098536 env[1094]: time="2023-10-02T19:32:44.097640445Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-jrbr8,Uid:4f26db9f-1d33-4cb5-a1cb-304eda8dda4d,Namespace:kube-system,Attempt:0,}" Oct 2 19:32:45.012098 env[1094]: time="2023-10-02T19:32:45.011893297Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.056318 env[1094]: time="2023-10-02T19:32:45.049642953Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.059511 env[1094]: time="2023-10-02T19:32:45.059333099Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.068969 env[1094]: time="2023-10-02T19:32:45.068866067Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.087945 env[1094]: time="2023-10-02T19:32:45.086432783Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.089799 env[1094]: time="2023-10-02T19:32:45.089681908Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.100941 env[1094]: time="2023-10-02T19:32:45.100820097Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.106759 env[1094]: time="2023-10-02T19:32:45.106687659Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.117562 env[1094]: time="2023-10-02T19:32:45.116578937Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.135531 env[1094]: time="2023-10-02T19:32:45.122039466Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.135531 env[1094]: time="2023-10-02T19:32:45.123849616Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.135531 env[1094]: time="2023-10-02T19:32:45.132902291Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:45.174968 env[1094]: time="2023-10-02T19:32:45.173032781Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:32:45.174968 env[1094]: time="2023-10-02T19:32:45.173090742Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:32:45.174968 env[1094]: time="2023-10-02T19:32:45.173107423Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:32:45.174968 env[1094]: time="2023-10-02T19:32:45.173311581Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075 pid=2180 runtime=io.containerd.runc.v2 Oct 2 19:32:45.175481 env[1094]: time="2023-10-02T19:32:45.174910088Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:32:45.175481 env[1094]: time="2023-10-02T19:32:45.175369061Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:32:45.175481 env[1094]: time="2023-10-02T19:32:45.175402064Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:32:45.175792 env[1094]: time="2023-10-02T19:32:45.175717644Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dff2f40611a12f3cacb7fe1d2cfdf4f0da7fdef20d07a35754126c894e425e10 pid=2167 runtime=io.containerd.runc.v2 Oct 2 19:32:45.201773 env[1094]: time="2023-10-02T19:32:45.201712368Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:32:45.201985 env[1094]: time="2023-10-02T19:32:45.201962423Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:32:45.202076 env[1094]: time="2023-10-02T19:32:45.202054038Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:32:45.202252 env[1094]: time="2023-10-02T19:32:45.202229180Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507 pid=2219 runtime=io.containerd.runc.v2 Oct 2 19:32:45.205503 systemd[1]: Started cri-containerd-dff2f40611a12f3cacb7fe1d2cfdf4f0da7fdef20d07a35754126c894e425e10.scope. Oct 2 19:32:45.210814 systemd[1]: Started cri-containerd-5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075.scope. Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.223328 kernel: kauditd_printk_skb: 283 callbacks suppressed Oct 2 19:32:45.223418 kernel: audit: type=1400 audit(1696275165.219:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.227479 systemd[1]: Started cri-containerd-546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507.scope. Oct 2 19:32:45.229408 kernel: audit: type=1400 audit(1696275165.219:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.229466 kernel: audit: type=1400 audit(1696275165.219:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.233474 kernel: audit: type=1400 audit(1696275165.219:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.233582 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.240257 kernel: audit: type=1400 audit(1696275165.219:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.240345 kernel: audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:32:45.240365 kernel: audit: type=1400 audit(1696275165.219:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.240396 kernel: audit: type=1400 audit(1696275165.219:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.240414 kernel: audit: type=1400 audit(1696275165.219:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.219000 audit: BPF prog-id=112 op=LOAD Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2167 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466663266343036313161313266336361636237666531643263666466 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=2167 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466663266343036313161313266336361636237666531643263666466 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit: BPF prog-id=113 op=LOAD Oct 2 19:32:45.220000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000205a70 items=0 ppid=2167 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466663266343036313161313266336361636237666531643263666466 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit: BPF prog-id=114 op=LOAD Oct 2 19:32:45.220000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000205ab8 items=0 ppid=2167 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466663266343036313161313266336361636237666531643263666466 Oct 2 19:32:45.220000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:32:45.220000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.220000 audit: BPF prog-id=115 op=LOAD Oct 2 19:32:45.220000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000205ec8 items=0 ppid=2167 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466663266343036313161313266336361636237666531643263666466 Oct 2 19:32:45.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.231000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.231000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.231000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.231000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.248000 audit: BPF prog-id=116 op=LOAD Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2180 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565623938316639643736343763396163636666663366313931666434 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2180 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565623938316639643736343763396163636666663366313931666434 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit: BPF prog-id=117 op=LOAD Oct 2 19:32:45.249000 audit[2190]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003b0d50 items=0 ppid=2180 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565623938316639643736343763396163636666663366313931666434 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.252000 audit: BPF prog-id=118 op=LOAD Oct 2 19:32:45.249000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.249000 audit: BPF prog-id=119 op=LOAD Oct 2 19:32:45.249000 audit[2190]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003b0d98 items=0 ppid=2180 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565623938316639643736343763396163636666663366313931666434 Oct 2 19:32:45.252000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:32:45.253000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { perfmon } for pid=2190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit[2190]: AVC avc: denied { bpf } for pid=2190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.253000 audit: BPF prog-id=120 op=LOAD Oct 2 19:32:45.253000 audit[2190]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003b11a8 items=0 ppid=2180 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565623938316639643736343763396163636666663366313931666434 Oct 2 19:32:45.257000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.257000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2219 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363037346664313038626331623838366434393331353332666131 Oct 2 19:32:45.257000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.257000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2219 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363037346664313038626331623838366434393331353332666131 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit: BPF prog-id=121 op=LOAD Oct 2 19:32:45.258000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001db9c0 items=0 ppid=2219 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363037346664313038626331623838366434393331353332666131 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit: BPF prog-id=122 op=LOAD Oct 2 19:32:45.258000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001dba08 items=0 ppid=2219 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363037346664313038626331623838366434393331353332666131 Oct 2 19:32:45.258000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:32:45.258000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:45.258000 audit: BPF prog-id=123 op=LOAD Oct 2 19:32:45.258000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001dbe18 items=0 ppid=2219 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:45.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363037346664313038626331623838366434393331353332666131 Oct 2 19:32:45.274421 env[1094]: time="2023-10-02T19:32:45.274299473Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wbdgd,Uid:59fe0e9b-3ccd-4afd-b658-8ce2630334e3,Namespace:kube-system,Attempt:0,} returns sandbox id \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\"" Oct 2 19:32:45.275263 kubelet[2060]: E1002 19:32:45.275242 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:45.278317 env[1094]: time="2023-10-02T19:32:45.278273736Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:32:45.287180 env[1094]: time="2023-10-02T19:32:45.287098138Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5q9bs,Uid:05e5fcff-d58c-49db-afed-be48fc9ecc97,Namespace:kube-system,Attempt:0,} returns sandbox id \"dff2f40611a12f3cacb7fe1d2cfdf4f0da7fdef20d07a35754126c894e425e10\"" Oct 2 19:32:45.287705 kubelet[2060]: E1002 19:32:45.287670 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:45.298665 env[1094]: time="2023-10-02T19:32:45.298570101Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-jrbr8,Uid:4f26db9f-1d33-4cb5-a1cb-304eda8dda4d,Namespace:kube-system,Attempt:0,} returns sandbox id \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\"" Oct 2 19:32:45.299947 kubelet[2060]: E1002 19:32:45.299911 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:50.297946 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount412726106.mount: Deactivated successfully. Oct 2 19:32:56.412480 env[1094]: time="2023-10-02T19:32:56.412417178Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:56.414244 env[1094]: time="2023-10-02T19:32:56.414200800Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:56.415673 env[1094]: time="2023-10-02T19:32:56.415644477Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:56.416234 env[1094]: time="2023-10-02T19:32:56.416208657Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:32:56.417162 env[1094]: time="2023-10-02T19:32:56.417104505Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:32:56.417811 env[1094]: time="2023-10-02T19:32:56.417787481Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:32:56.431505 env[1094]: time="2023-10-02T19:32:56.431435659Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\"" Oct 2 19:32:56.431995 env[1094]: time="2023-10-02T19:32:56.431967357Z" level=info msg="StartContainer for \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\"" Oct 2 19:32:56.447814 systemd[1]: Started cri-containerd-f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a.scope. Oct 2 19:32:56.456258 systemd[1]: cri-containerd-f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a.scope: Deactivated successfully. Oct 2 19:32:56.456488 systemd[1]: Stopped cri-containerd-f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a.scope. Oct 2 19:32:56.924789 env[1094]: time="2023-10-02T19:32:56.924735617Z" level=info msg="shim disconnected" id=f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a Oct 2 19:32:56.924789 env[1094]: time="2023-10-02T19:32:56.924784890Z" level=warning msg="cleaning up after shim disconnected" id=f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a namespace=k8s.io Oct 2 19:32:56.924789 env[1094]: time="2023-10-02T19:32:56.924796153Z" level=info msg="cleaning up dead shim" Oct 2 19:32:56.931151 env[1094]: time="2023-10-02T19:32:56.931113370Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:32:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2309 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:32:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:32:56.931391 env[1094]: time="2023-10-02T19:32:56.931297349Z" level=error msg="copy shim log" error="read /proc/self/fd/29: file already closed" Oct 2 19:32:56.931563 env[1094]: time="2023-10-02T19:32:56.931502598Z" level=error msg="Failed to pipe stdout of container \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\"" error="reading from a closed fifo" Oct 2 19:32:56.931563 env[1094]: time="2023-10-02T19:32:56.931528608Z" level=error msg="Failed to pipe stderr of container \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\"" error="reading from a closed fifo" Oct 2 19:32:56.943992 env[1094]: time="2023-10-02T19:32:56.943919422Z" level=error msg="StartContainer for \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:32:56.944267 kubelet[2060]: E1002 19:32:56.944215 2060 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a" Oct 2 19:32:56.944609 kubelet[2060]: E1002 19:32:56.944419 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:32:56.944609 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:32:56.944609 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:32:56.944609 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhbg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:32:56.944824 kubelet[2060]: E1002 19:32:56.944465 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:32:57.240784 kubelet[2060]: E1002 19:32:57.240635 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:57.243713 env[1094]: time="2023-10-02T19:32:57.243641491Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:32:57.355498 env[1094]: time="2023-10-02T19:32:57.355420657Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\"" Oct 2 19:32:57.357414 env[1094]: time="2023-10-02T19:32:57.356303290Z" level=info msg="StartContainer for \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\"" Oct 2 19:32:57.373316 systemd[1]: Started cri-containerd-31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2.scope. Oct 2 19:32:57.383544 systemd[1]: cri-containerd-31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2.scope: Deactivated successfully. Oct 2 19:32:57.383897 systemd[1]: Stopped cri-containerd-31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2.scope. Oct 2 19:32:57.396270 env[1094]: time="2023-10-02T19:32:57.396202522Z" level=info msg="shim disconnected" id=31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2 Oct 2 19:32:57.396270 env[1094]: time="2023-10-02T19:32:57.396264409Z" level=warning msg="cleaning up after shim disconnected" id=31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2 namespace=k8s.io Oct 2 19:32:57.396270 env[1094]: time="2023-10-02T19:32:57.396278095Z" level=info msg="cleaning up dead shim" Oct 2 19:32:57.405222 env[1094]: time="2023-10-02T19:32:57.405133022Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:32:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2345 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:32:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:32:57.405562 env[1094]: time="2023-10-02T19:32:57.405484288Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:32:57.407748 env[1094]: time="2023-10-02T19:32:57.407694779Z" level=error msg="Failed to pipe stdout of container \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\"" error="reading from a closed fifo" Oct 2 19:32:57.407830 env[1094]: time="2023-10-02T19:32:57.407789890Z" level=error msg="Failed to pipe stderr of container \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\"" error="reading from a closed fifo" Oct 2 19:32:57.425501 env[1094]: time="2023-10-02T19:32:57.425403361Z" level=error msg="StartContainer for \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:32:57.425707 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a-rootfs.mount: Deactivated successfully. Oct 2 19:32:57.426721 kubelet[2060]: E1002 19:32:57.426677 2060 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2" Oct 2 19:32:57.426929 kubelet[2060]: E1002 19:32:57.426861 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:32:57.426929 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:32:57.426929 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:32:57.426929 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhbg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:32:57.427175 kubelet[2060]: E1002 19:32:57.426916 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:32:58.243131 kubelet[2060]: I1002 19:32:58.243046 2060 scope.go:115] "RemoveContainer" containerID="f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a" Oct 2 19:32:58.243647 kubelet[2060]: I1002 19:32:58.243531 2060 scope.go:115] "RemoveContainer" containerID="f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a" Oct 2 19:32:58.244477 env[1094]: time="2023-10-02T19:32:58.244435941Z" level=info msg="RemoveContainer for \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\"" Oct 2 19:32:58.244815 env[1094]: time="2023-10-02T19:32:58.244776606Z" level=info msg="RemoveContainer for \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\"" Oct 2 19:32:58.244878 env[1094]: time="2023-10-02T19:32:58.244844024Z" level=error msg="RemoveContainer for \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\" failed" error="failed to set removing state for container \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\": container is already in removing state" Oct 2 19:32:58.245154 kubelet[2060]: E1002 19:32:58.245110 2060 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\": container is already in removing state" containerID="f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a" Oct 2 19:32:58.245224 kubelet[2060]: E1002 19:32:58.245169 2060 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a": container is already in removing state; Skipping pod "cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)" Oct 2 19:32:58.245260 kubelet[2060]: E1002 19:32:58.245237 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:58.245552 kubelet[2060]: E1002 19:32:58.245515 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:32:58.482462 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2995607142.mount: Deactivated successfully. Oct 2 19:32:58.583068 env[1094]: time="2023-10-02T19:32:58.583007331Z" level=info msg="RemoveContainer for \"f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a\" returns successfully" Oct 2 19:32:59.246638 kubelet[2060]: E1002 19:32:59.246591 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:32:59.247904 kubelet[2060]: E1002 19:32:59.247878 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:33:00.030986 kubelet[2060]: W1002 19:33:00.030935 2060 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod59fe0e9b_3ccd_4afd_b658_8ce2630334e3.slice/cri-containerd-f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a.scope WatchSource:0}: container "f42daf40f0296889108b754bb71e17ae317308f4b56a71b6caec8185ce27fd5a" in namespace "k8s.io": not found Oct 2 19:33:00.853184 env[1094]: time="2023-10-02T19:33:00.853104874Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:33:00.857048 env[1094]: time="2023-10-02T19:33:00.857006829Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:33:00.860094 env[1094]: time="2023-10-02T19:33:00.860030981Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:33:00.861950 env[1094]: time="2023-10-02T19:33:00.861896134Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:33:00.862294 env[1094]: time="2023-10-02T19:33:00.862252791Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:33:00.863322 env[1094]: time="2023-10-02T19:33:00.863286460Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:33:00.864293 env[1094]: time="2023-10-02T19:33:00.864239867Z" level=info msg="CreateContainer within sandbox \"dff2f40611a12f3cacb7fe1d2cfdf4f0da7fdef20d07a35754126c894e425e10\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:33:01.030190 env[1094]: time="2023-10-02T19:33:01.030093133Z" level=info msg="CreateContainer within sandbox \"dff2f40611a12f3cacb7fe1d2cfdf4f0da7fdef20d07a35754126c894e425e10\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"e7d9ecd57aa03b25b3f346bb2a8f37707ce2a73fa5a5381b7819df29e26f5486\"" Oct 2 19:33:01.032420 env[1094]: time="2023-10-02T19:33:01.030938545Z" level=info msg="StartContainer for \"e7d9ecd57aa03b25b3f346bb2a8f37707ce2a73fa5a5381b7819df29e26f5486\"" Oct 2 19:33:01.050157 systemd[1]: Started cri-containerd-e7d9ecd57aa03b25b3f346bb2a8f37707ce2a73fa5a5381b7819df29e26f5486.scope. Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.065750 kernel: kauditd_printk_skb: 163 callbacks suppressed Oct 2 19:33:01.065816 kernel: audit: type=1400 audit(1696275181.064:1038): avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2167 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.071207 kernel: audit: type=1300 audit(1696275181.064:1038): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2167 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.071254 kernel: audit: type=1327 audit(1696275181.064:1038): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643965636435376161303362323562336633343662623261386633 Oct 2 19:33:01.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643965636435376161303362323562336633343662623261386633 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.076387 kernel: audit: type=1400 audit(1696275181.064:1039): avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.076427 kernel: audit: type=1400 audit(1696275181.064:1039): avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.078699 kernel: audit: type=1400 audit(1696275181.064:1039): avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.082813 kernel: audit: type=1400 audit(1696275181.064:1039): avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.082858 kernel: audit: type=1400 audit(1696275181.064:1039): avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.087479 kernel: audit: type=1400 audit(1696275181.064:1039): avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.087528 kernel: audit: type=1400 audit(1696275181.064:1039): avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.064000 audit: BPF prog-id=124 op=LOAD Oct 2 19:33:01.064000 audit[2364]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003b0ab0 items=0 ppid=2167 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643965636435376161303362323562336633343662623261386633 Oct 2 19:33:01.067000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.067000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.067000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.067000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.067000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.067000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.067000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.067000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.067000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.067000 audit: BPF prog-id=125 op=LOAD Oct 2 19:33:01.067000 audit[2364]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003b0af8 items=0 ppid=2167 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643965636435376161303362323562336633343662623261386633 Oct 2 19:33:01.073000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:33:01.073000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:01.073000 audit: BPF prog-id=126 op=LOAD Oct 2 19:33:01.073000 audit[2364]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003b0b88 items=0 ppid=2167 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537643965636435376161303362323562336633343662623261386633 Oct 2 19:33:01.097986 env[1094]: time="2023-10-02T19:33:01.097942782Z" level=info msg="StartContainer for \"e7d9ecd57aa03b25b3f346bb2a8f37707ce2a73fa5a5381b7819df29e26f5486\" returns successfully" Oct 2 19:33:01.136000 audit[2414]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.136000 audit[2414]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe3dce0d20 a2=0 a3=7ffe3dce0d0c items=0 ppid=2375 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.136000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:33:01.136000 audit[2415]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2415 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.136000 audit[2415]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc16390e60 a2=0 a3=7ffc16390e4c items=0 ppid=2375 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.136000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:33:01.139000 audit[2416]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.139000 audit[2416]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe54ab68b0 a2=0 a3=7ffe54ab689c items=0 ppid=2375 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.139000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:33:01.139000 audit[2417]: NETFILTER_CFG table=nat:62 family=10 entries=1 op=nft_register_chain pid=2417 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.139000 audit[2417]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffc2798960 a2=0 a3=7fffc279894c items=0 ppid=2375 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.139000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:33:01.140000 audit[2418]: NETFILTER_CFG table=filter:63 family=10 entries=1 op=nft_register_chain pid=2418 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.140000 audit[2418]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff348e7c20 a2=0 a3=7fff348e7c0c items=0 ppid=2375 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.140000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:33:01.141000 audit[2419]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_chain pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.141000 audit[2419]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5705ba60 a2=0 a3=7ffe5705ba4c items=0 ppid=2375 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.141000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:33:01.241000 audit[2420]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.241000 audit[2420]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff82f25dc0 a2=0 a3=7fff82f25dac items=0 ppid=2375 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.241000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:33:01.243000 audit[2422]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.243000 audit[2422]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc32f0aec0 a2=0 a3=7ffc32f0aeac items=0 ppid=2375 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.243000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:33:01.246000 audit[2425]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.246000 audit[2425]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff7e7abdc0 a2=0 a3=7fff7e7abdac items=0 ppid=2375 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.246000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:33:01.247000 audit[2426]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.247000 audit[2426]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc60f01bd0 a2=0 a3=7ffc60f01bbc items=0 ppid=2375 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.247000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:33:01.249000 audit[2428]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.249000 audit[2428]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff4f9bbb10 a2=0 a3=7fff4f9bbafc items=0 ppid=2375 pid=2428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.249000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:33:01.251139 kubelet[2060]: E1002 19:33:01.251119 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:01.250000 audit[2429]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.250000 audit[2429]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0c0c5150 a2=0 a3=7ffd0c0c513c items=0 ppid=2375 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.250000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:33:01.255000 audit[2431]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.255000 audit[2431]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffec599e830 a2=0 a3=7ffec599e81c items=0 ppid=2375 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.255000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:33:01.258000 audit[2434]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.258000 audit[2434]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff785905b0 a2=0 a3=7fff7859059c items=0 ppid=2375 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.258000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:33:01.259000 audit[2435]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.259000 audit[2435]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff56025800 a2=0 a3=7fff560257ec items=0 ppid=2375 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.259000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:33:01.261000 audit[2437]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.261000 audit[2437]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffef4cf5d40 a2=0 a3=7ffef4cf5d2c items=0 ppid=2375 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.261000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:33:01.262000 audit[2438]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.262000 audit[2438]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb5039140 a2=0 a3=7fffb503912c items=0 ppid=2375 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.262000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:33:01.264000 audit[2440]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.264000 audit[2440]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff745c36b0 a2=0 a3=7fff745c369c items=0 ppid=2375 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.264000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:33:01.267000 audit[2443]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.267000 audit[2443]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc80a1a910 a2=0 a3=7ffc80a1a8fc items=0 ppid=2375 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.267000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:33:01.270000 audit[2446]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.270000 audit[2446]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff75c1bf60 a2=0 a3=7fff75c1bf4c items=0 ppid=2375 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.270000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:33:01.271000 audit[2447]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.271000 audit[2447]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe7adfe6d0 a2=0 a3=7ffe7adfe6bc items=0 ppid=2375 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.271000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:33:01.273000 audit[2449]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.273000 audit[2449]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffdee5fef30 a2=0 a3=7ffdee5fef1c items=0 ppid=2375 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.273000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:33:01.275000 audit[2452]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:33:01.275000 audit[2452]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe93124560 a2=0 a3=7ffe9312454c items=0 ppid=2375 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.275000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:33:01.368000 audit[2456]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2456 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:33:01.368000 audit[2456]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffdd03fa110 a2=0 a3=7ffdd03fa0fc items=0 ppid=2375 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.368000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:33:01.373000 audit[2456]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2456 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:33:01.373000 audit[2456]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffdd03fa110 a2=0 a3=7ffdd03fa0fc items=0 ppid=2375 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.373000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:33:01.378000 audit[2461]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2461 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.378000 audit[2461]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc09f0bcb0 a2=0 a3=7ffc09f0bc9c items=0 ppid=2375 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.378000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:33:01.380000 audit[2463]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=2463 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.380000 audit[2463]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd627c8700 a2=0 a3=7ffd627c86ec items=0 ppid=2375 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.380000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:33:01.383000 audit[2466]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=2466 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.383000 audit[2466]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff1f3586c0 a2=0 a3=7fff1f3586ac items=0 ppid=2375 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.383000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:33:01.384000 audit[2467]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2467 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.384000 audit[2467]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef50db840 a2=0 a3=7ffef50db82c items=0 ppid=2375 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:33:01.386000 audit[2469]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2469 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.386000 audit[2469]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffe6399a10 a2=0 a3=7fffe63999fc items=0 ppid=2375 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.386000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:33:01.387000 audit[2470]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2470 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.387000 audit[2470]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde2aeb080 a2=0 a3=7ffde2aeb06c items=0 ppid=2375 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:33:01.389000 audit[2472]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2472 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.389000 audit[2472]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd24b24ac0 a2=0 a3=7ffd24b24aac items=0 ppid=2375 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.389000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:33:01.393000 audit[2475]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=2475 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.393000 audit[2475]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffeec1f1040 a2=0 a3=7ffeec1f102c items=0 ppid=2375 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.393000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:33:01.394000 audit[2476]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2476 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.394000 audit[2476]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcb3b74280 a2=0 a3=7ffcb3b7426c items=0 ppid=2375 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.394000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:33:01.396000 audit[2478]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2478 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.396000 audit[2478]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc1f1fdc70 a2=0 a3=7ffc1f1fdc5c items=0 ppid=2375 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.396000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:33:01.397000 audit[2479]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2479 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.397000 audit[2479]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe7689e1d0 a2=0 a3=7ffe7689e1bc items=0 ppid=2375 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.397000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:33:01.399000 audit[2481]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2481 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.399000 audit[2481]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff7ca40e00 a2=0 a3=7fff7ca40dec items=0 ppid=2375 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.399000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:33:01.402000 audit[2484]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2484 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.402000 audit[2484]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc33515530 a2=0 a3=7ffc3351551c items=0 ppid=2375 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.402000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:33:01.406000 audit[2487]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2487 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.406000 audit[2487]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd9ccbb790 a2=0 a3=7ffd9ccbb77c items=0 ppid=2375 pid=2487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.406000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:33:01.407000 audit[2488]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=2488 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.407000 audit[2488]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd57c55930 a2=0 a3=7ffd57c5591c items=0 ppid=2375 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.407000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:33:01.409000 audit[2490]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=2490 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.409000 audit[2490]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fffbc9b4290 a2=0 a3=7fffbc9b427c items=0 ppid=2375 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:33:01.412000 audit[2493]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=2493 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:33:01.412000 audit[2493]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffdbafb2880 a2=0 a3=7ffdbafb286c items=0 ppid=2375 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.412000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:33:01.418000 audit[2497]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=2497 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:33:01.418000 audit[2497]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffc4fb5fd40 a2=0 a3=7ffc4fb5fd2c items=0 ppid=2375 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.418000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:33:01.418000 audit[2497]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=2497 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:33:01.418000 audit[2497]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffc4fb5fd40 a2=0 a3=7ffc4fb5fd2c items=0 ppid=2375 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:01.418000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:33:02.253030 kubelet[2060]: E1002 19:33:02.253005 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:03.136119 kubelet[2060]: W1002 19:33:03.136065 2060 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod59fe0e9b_3ccd_4afd_b658_8ce2630334e3.slice/cri-containerd-31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2.scope WatchSource:0}: task 31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2 not found: not found Oct 2 19:33:04.677077 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3430191177.mount: Deactivated successfully. Oct 2 19:33:07.931979 env[1094]: time="2023-10-02T19:33:07.931895827Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:33:07.935087 env[1094]: time="2023-10-02T19:33:07.935037625Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:33:07.937874 env[1094]: time="2023-10-02T19:33:07.937804253Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:33:07.938539 env[1094]: time="2023-10-02T19:33:07.938484346Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:33:07.940427 env[1094]: time="2023-10-02T19:33:07.940395465Z" level=info msg="CreateContainer within sandbox \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:33:08.134138 env[1094]: time="2023-10-02T19:33:08.134082704Z" level=info msg="CreateContainer within sandbox \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\"" Oct 2 19:33:08.134467 env[1094]: time="2023-10-02T19:33:08.134433364Z" level=info msg="StartContainer for \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\"" Oct 2 19:33:08.150329 systemd[1]: Started cri-containerd-fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7.scope. Oct 2 19:33:08.162062 kernel: kauditd_printk_skb: 165 callbacks suppressed Oct 2 19:33:08.162155 kernel: audit: type=1400 audit(1696275188.158:1088): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.162180 kernel: audit: type=1400 audit(1696275188.158:1089): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169920 kernel: audit: type=1400 audit(1696275188.158:1090): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169967 kernel: audit: type=1400 audit(1696275188.158:1091): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.170023 kernel: audit: type=1400 audit(1696275188.158:1092): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.172124 kernel: audit: type=1400 audit(1696275188.158:1093): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.174153 kernel: audit: type=1400 audit(1696275188.158:1094): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.176131 kernel: audit: type=1400 audit(1696275188.158:1095): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.178134 kernel: audit: type=1400 audit(1696275188.158:1096): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.180437 kernel: audit: type=1400 audit(1696275188.161:1097): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit: BPF prog-id=127 op=LOAD Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2219 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:08.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326136616531613865323233316563396361633535353265303639 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2219 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:08.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326136616531613865323233316563396361633535353265303639 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.161000 audit: BPF prog-id=128 op=LOAD Oct 2 19:33:08.161000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031e950 items=0 ppid=2219 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:08.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326136616531613865323233316563396361633535353265303639 Oct 2 19:33:08.167000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.167000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.167000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.167000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.167000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.167000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.167000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.167000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.167000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.167000 audit: BPF prog-id=129 op=LOAD Oct 2 19:33:08.167000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031e998 items=0 ppid=2219 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:08.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326136616531613865323233316563396361633535353265303639 Oct 2 19:33:08.169000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:33:08.169000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:33:08.169000 audit: BPF prog-id=130 op=LOAD Oct 2 19:33:08.169000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00031eda8 items=0 ppid=2219 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:08.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326136616531613865323233316563396361633535353265303639 Oct 2 19:33:08.189208 env[1094]: time="2023-10-02T19:33:08.189161843Z" level=info msg="StartContainer for \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\" returns successfully" Oct 2 19:33:08.206000 audit[2514]: AVC avc: denied { map_create } for pid=2514 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c691 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c691 tclass=bpf permissive=0 Oct 2 19:33:08.206000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0007077d0 a2=48 a3=c0007077c0 items=0 ppid=2219 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c691 key=(null) Oct 2 19:33:08.206000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:33:08.262865 kubelet[2060]: E1002 19:33:08.262825 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:08.273540 kubelet[2060]: I1002 19:33:08.273286 2060 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-5q9bs" podStartSLOduration=-9.223372010581543e+09 pod.CreationTimestamp="2023-10-02 19:32:42 +0000 UTC" firstStartedPulling="2023-10-02 19:32:45.288443565 +0000 UTC m=+16.261764442" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:33:01.36773684 +0000 UTC m=+32.341057717" watchObservedRunningTime="2023-10-02 19:33:08.273231946 +0000 UTC m=+39.246552823" Oct 2 19:33:09.264504 kubelet[2060]: E1002 19:33:09.264458 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:11.159469 kubelet[2060]: E1002 19:33:11.159434 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:11.161445 env[1094]: time="2023-10-02T19:33:11.161413684Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:33:11.821910 env[1094]: time="2023-10-02T19:33:11.821856402Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\"" Oct 2 19:33:11.822413 env[1094]: time="2023-10-02T19:33:11.822373831Z" level=info msg="StartContainer for \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\"" Oct 2 19:33:11.837368 systemd[1]: Started cri-containerd-ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113.scope. Oct 2 19:33:11.843944 systemd[1]: cri-containerd-ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113.scope: Deactivated successfully. Oct 2 19:33:11.844312 systemd[1]: Stopped cri-containerd-ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113.scope. Oct 2 19:33:12.445800 env[1094]: time="2023-10-02T19:33:12.445743176Z" level=info msg="shim disconnected" id=ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113 Oct 2 19:33:12.445800 env[1094]: time="2023-10-02T19:33:12.445794684Z" level=warning msg="cleaning up after shim disconnected" id=ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113 namespace=k8s.io Oct 2 19:33:12.445800 env[1094]: time="2023-10-02T19:33:12.445802920Z" level=info msg="cleaning up dead shim" Oct 2 19:33:12.452653 env[1094]: time="2023-10-02T19:33:12.452607531Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:33:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2560 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:33:12Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:33:12.452890 env[1094]: time="2023-10-02T19:33:12.452826339Z" level=error msg="copy shim log" error="read /proc/self/fd/111: file already closed" Oct 2 19:33:12.453056 env[1094]: time="2023-10-02T19:33:12.453017394Z" level=error msg="Failed to pipe stderr of container \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\"" error="reading from a closed fifo" Oct 2 19:33:12.454713 env[1094]: time="2023-10-02T19:33:12.454657591Z" level=error msg="Failed to pipe stdout of container \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\"" error="reading from a closed fifo" Oct 2 19:33:12.613316 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113-rootfs.mount: Deactivated successfully. Oct 2 19:33:12.686106 env[1094]: time="2023-10-02T19:33:12.686027927Z" level=error msg="StartContainer for \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:33:12.686359 kubelet[2060]: E1002 19:33:12.686313 2060 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113" Oct 2 19:33:12.686644 kubelet[2060]: E1002 19:33:12.686429 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:33:12.686644 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:33:12.686644 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:33:12.686644 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhbg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:33:12.686793 kubelet[2060]: E1002 19:33:12.686466 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:33:13.272253 kubelet[2060]: I1002 19:33:13.272208 2060 scope.go:115] "RemoveContainer" containerID="31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2" Oct 2 19:33:13.272557 kubelet[2060]: I1002 19:33:13.272539 2060 scope.go:115] "RemoveContainer" containerID="31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2" Oct 2 19:33:13.274054 env[1094]: time="2023-10-02T19:33:13.274023080Z" level=info msg="RemoveContainer for \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\"" Oct 2 19:33:13.274207 env[1094]: time="2023-10-02T19:33:13.274164962Z" level=info msg="RemoveContainer for \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\"" Oct 2 19:33:13.274348 env[1094]: time="2023-10-02T19:33:13.274287826Z" level=error msg="RemoveContainer for \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\" failed" error="failed to set removing state for container \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\": container is already in removing state" Oct 2 19:33:13.274446 kubelet[2060]: E1002 19:33:13.274426 2060 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\": container is already in removing state" containerID="31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2" Oct 2 19:33:13.274495 kubelet[2060]: E1002 19:33:13.274451 2060 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2": container is already in removing state; Skipping pod "cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)" Oct 2 19:33:13.274521 kubelet[2060]: E1002 19:33:13.274500 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:13.274698 kubelet[2060]: E1002 19:33:13.274683 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:33:13.375690 kubelet[2060]: I1002 19:33:13.375662 2060 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" podStartSLOduration=-9.223372006479149e+09 pod.CreationTimestamp="2023-10-02 19:32:43 +0000 UTC" firstStartedPulling="2023-10-02 19:32:45.300582535 +0000 UTC m=+16.273903412" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:33:08.274171846 +0000 UTC m=+39.247492733" watchObservedRunningTime="2023-10-02 19:33:13.375627733 +0000 UTC m=+44.348948610" Oct 2 19:33:13.382045 env[1094]: time="2023-10-02T19:33:13.381983973Z" level=info msg="RemoveContainer for \"31147140d1ad7ca9ec20cff85eccc4037337d6614841c1593405664cd88455f2\" returns successfully" Oct 2 19:33:15.550559 kubelet[2060]: W1002 19:33:15.550483 2060 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod59fe0e9b_3ccd_4afd_b658_8ce2630334e3.slice/cri-containerd-ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113.scope WatchSource:0}: task ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113 not found: not found Oct 2 19:33:15.562889 kubelet[2060]: I1002 19:33:15.562861 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:15.562889 kubelet[2060]: I1002 19:33:15.562893 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:33:15.564382 kubelet[2060]: I1002 19:33:15.564355 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:33:15.573386 kubelet[2060]: I1002 19:33:15.573354 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:15.573841 kubelet[2060]: I1002 19:33:15.573820 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:33:15.573907 kubelet[2060]: E1002 19:33:15.573863 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:33:15.573907 kubelet[2060]: E1002 19:33:15.573878 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:33:15.573907 kubelet[2060]: E1002 19:33:15.573892 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:33:15.573907 kubelet[2060]: E1002 19:33:15.573902 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:33:15.574008 kubelet[2060]: E1002 19:33:15.573914 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:33:15.574008 kubelet[2060]: E1002 19:33:15.573926 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:33:15.574008 kubelet[2060]: I1002 19:33:15.573938 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:33:17.531496 systemd[1]: Started sshd@7-10.0.0.13:22-10.0.0.1:38616.service. Oct 2 19:33:17.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.13:22-10.0.0.1:38616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.532925 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:33:17.532967 kernel: audit: type=1130 audit(1696275197.530:1107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.13:22-10.0.0.1:38616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:17.568000 audit[2574]: USER_ACCT pid=2574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.570306 sshd[2574]: Accepted publickey for core from 10.0.0.1 port 38616 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:33:17.572197 sshd[2574]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:17.570000 audit[2574]: CRED_ACQ pid=2574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.575062 kernel: audit: type=1101 audit(1696275197.568:1108): pid=2574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.575115 kernel: audit: type=1103 audit(1696275197.570:1109): pid=2574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.575134 kernel: audit: type=1006 audit(1696275197.570:1110): pid=2574 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:33:17.575755 systemd-logind[1077]: New session 8 of user core. Oct 2 19:33:17.576648 kernel: audit: type=1300 audit(1696275197.570:1110): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7c857b30 a2=3 a3=0 items=0 ppid=1 pid=2574 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:17.570000 audit[2574]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7c857b30 a2=3 a3=0 items=0 ppid=1 pid=2574 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:17.576995 systemd[1]: Started session-8.scope. Oct 2 19:33:17.570000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:17.579875 kernel: audit: type=1327 audit(1696275197.570:1110): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:17.579000 audit[2574]: USER_START pid=2574 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.580000 audit[2576]: CRED_ACQ pid=2576 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.585897 kernel: audit: type=1105 audit(1696275197.579:1111): pid=2574 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.585998 kernel: audit: type=1103 audit(1696275197.580:1112): pid=2576 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.748247 sshd[2574]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:17.747000 audit[2574]: USER_END pid=2574 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.750716 systemd[1]: sshd@7-10.0.0.13:22-10.0.0.1:38616.service: Deactivated successfully. Oct 2 19:33:17.751403 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:33:17.751953 systemd-logind[1077]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:33:17.747000 audit[2574]: CRED_DISP pid=2574 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.752898 systemd-logind[1077]: Removed session 8. Oct 2 19:33:17.754273 kernel: audit: type=1106 audit(1696275197.747:1113): pid=2574 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.754389 kernel: audit: type=1104 audit(1696275197.747:1114): pid=2574 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:17.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.13:22-10.0.0.1:38616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.375000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:24.377214 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:24.377374 kernel: audit: type=1400 audit(1696275204.375:1116): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:24.375000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:24.375000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00230a690 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:24.384953 kernel: audit: type=1400 audit(1696275204.375:1117): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:24.385007 kernel: audit: type=1300 audit(1696275204.375:1116): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00230a690 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:24.385036 kernel: audit: type=1300 audit(1696275204.375:1117): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001182120 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:24.375000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001182120 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:24.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:24.390552 kernel: audit: type=1327 audit(1696275204.375:1116): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:24.390617 kernel: audit: type=1327 audit(1696275204.375:1117): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:24.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:25.051000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:25.051000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7069 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:25.058245 kernel: audit: type=1400 audit(1696275205.051:1118): avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:25.058298 kernel: audit: type=1400 audit(1696275205.051:1119): avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7069 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:25.058325 kernel: audit: type=1400 audit(1696275205.051:1120): avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:25.051000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:25.051000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00a9626f0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:33:25.064109 kernel: audit: type=1300 audit(1696275205.051:1118): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00a9626f0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:33:25.051000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:33:25.051000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00b5dd6a0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:33:25.051000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00a7a39b0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:33:25.051000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:33:25.051000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:33:25.053000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7075 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:25.053000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00ab14d80 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:33:25.053000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:33:25.055000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:25.055000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00a962780 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:33:25.055000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:33:25.055000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:25.055000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00b8ae620 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:33:25.055000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:33:25.159116 kubelet[2060]: E1002 19:33:25.159069 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:25.159680 kubelet[2060]: E1002 19:33:25.159624 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:33:25.584632 kubelet[2060]: I1002 19:33:25.584584 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:25.584632 kubelet[2060]: I1002 19:33:25.584620 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:33:25.585879 kubelet[2060]: I1002 19:33:25.585850 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:33:25.593741 kubelet[2060]: I1002 19:33:25.593723 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:25.593815 kubelet[2060]: I1002 19:33:25.593790 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:33:25.593815 kubelet[2060]: E1002 19:33:25.593811 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:33:25.593862 kubelet[2060]: E1002 19:33:25.593826 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:33:25.593862 kubelet[2060]: E1002 19:33:25.593842 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:33:25.593862 kubelet[2060]: E1002 19:33:25.593856 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:33:25.593931 kubelet[2060]: E1002 19:33:25.593868 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:33:25.593931 kubelet[2060]: E1002 19:33:25.593887 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:33:25.593931 kubelet[2060]: I1002 19:33:25.593899 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:33:27.753261 systemd[1]: Started sshd@8-10.0.0.13:22-10.0.0.1:33952.service. Oct 2 19:33:27.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.13:22-10.0.0.1:33952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:27.790000 audit[2590]: USER_ACCT pid=2590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:27.791089 sshd[2590]: Accepted publickey for core from 10.0.0.1 port 33952 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:33:27.791000 audit[2590]: CRED_ACQ pid=2590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:27.791000 audit[2590]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec9c837a0 a2=3 a3=0 items=0 ppid=1 pid=2590 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:27.791000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:27.792028 sshd[2590]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:27.795008 systemd-logind[1077]: New session 9 of user core. Oct 2 19:33:27.795824 systemd[1]: Started session-9.scope. Oct 2 19:33:27.798000 audit[2590]: USER_START pid=2590 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:27.799000 audit[2592]: CRED_ACQ pid=2592 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:27.896905 sshd[2590]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:27.897000 audit[2590]: USER_END pid=2590 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:27.897000 audit[2590]: CRED_DISP pid=2590 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:27.899057 systemd[1]: sshd@8-10.0.0.13:22-10.0.0.1:33952.service: Deactivated successfully. Oct 2 19:33:27.899705 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:33:27.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.13:22-10.0.0.1:33952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:27.900173 systemd-logind[1077]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:33:27.900748 systemd-logind[1077]: Removed session 9. Oct 2 19:33:29.600000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:29.601749 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:33:29.601861 kernel: audit: type=1400 audit(1696275209.600:1133): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:29.600000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cf35c0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:29.607085 kernel: audit: type=1300 audit(1696275209.600:1133): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cf35c0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:29.607136 kernel: audit: type=1327 audit(1696275209.600:1133): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:29.600000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:29.609590 kernel: audit: type=1400 audit(1696275209.600:1134): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:29.600000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:29.611822 kernel: audit: type=1300 audit(1696275209.600:1134): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001182660 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:29.600000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001182660 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:29.600000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:29.617321 kernel: audit: type=1327 audit(1696275209.600:1134): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:29.617373 kernel: audit: type=1400 audit(1696275209.602:1135): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:29.602000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:29.619614 kernel: audit: type=1300 audit(1696275209.602:1135): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001083620 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:29.602000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001083620 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:29.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:29.658522 kernel: audit: type=1327 audit(1696275209.602:1135): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:29.658564 kernel: audit: type=1400 audit(1696275209.603:1136): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:29.603000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:29.603000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011828e0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:33:29.603000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:35.605167 kubelet[2060]: I1002 19:33:35.605133 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:35.605167 kubelet[2060]: I1002 19:33:35.605161 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:33:35.606091 kubelet[2060]: I1002 19:33:35.606081 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:33:35.613920 kubelet[2060]: I1002 19:33:35.613908 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:35.613986 kubelet[2060]: I1002 19:33:35.613962 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:33:35.613986 kubelet[2060]: E1002 19:33:35.613981 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:33:35.614034 kubelet[2060]: E1002 19:33:35.613994 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:33:35.614034 kubelet[2060]: E1002 19:33:35.614002 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:33:35.614034 kubelet[2060]: E1002 19:33:35.614010 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:33:35.614034 kubelet[2060]: E1002 19:33:35.614019 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:33:35.614034 kubelet[2060]: E1002 19:33:35.614027 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:33:35.614034 kubelet[2060]: I1002 19:33:35.614035 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:33:37.159182 kubelet[2060]: E1002 19:33:37.159140 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:37.164293 env[1094]: time="2023-10-02T19:33:37.163655904Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:33:37.176673 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount786254118.mount: Deactivated successfully. Oct 2 19:33:37.178810 env[1094]: time="2023-10-02T19:33:37.178738397Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\"" Oct 2 19:33:37.179236 env[1094]: time="2023-10-02T19:33:37.179213922Z" level=info msg="StartContainer for \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\"" Oct 2 19:33:37.194007 systemd[1]: Started cri-containerd-2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff.scope. Oct 2 19:33:37.202034 systemd[1]: cri-containerd-2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff.scope: Deactivated successfully. Oct 2 19:33:37.202270 systemd[1]: Stopped cri-containerd-2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff.scope. Oct 2 19:33:37.211701 env[1094]: time="2023-10-02T19:33:37.211651852Z" level=info msg="shim disconnected" id=2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff Oct 2 19:33:37.211827 env[1094]: time="2023-10-02T19:33:37.211703230Z" level=warning msg="cleaning up after shim disconnected" id=2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff namespace=k8s.io Oct 2 19:33:37.211827 env[1094]: time="2023-10-02T19:33:37.211715694Z" level=info msg="cleaning up dead shim" Oct 2 19:33:37.217629 env[1094]: time="2023-10-02T19:33:37.217587144Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:33:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2630 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:33:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:33:37.217856 env[1094]: time="2023-10-02T19:33:37.217812743Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" Oct 2 19:33:37.218068 env[1094]: time="2023-10-02T19:33:37.217995250Z" level=error msg="Failed to pipe stderr of container \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\"" error="reading from a closed fifo" Oct 2 19:33:37.222735 env[1094]: time="2023-10-02T19:33:37.222689039Z" level=error msg="Failed to pipe stdout of container \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\"" error="reading from a closed fifo" Oct 2 19:33:37.225063 env[1094]: time="2023-10-02T19:33:37.224779076Z" level=error msg="StartContainer for \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:33:37.225120 kubelet[2060]: E1002 19:33:37.224938 2060 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff" Oct 2 19:33:37.225120 kubelet[2060]: E1002 19:33:37.225029 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:33:37.225120 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:33:37.225120 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:33:37.225248 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhbg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:33:37.225308 kubelet[2060]: E1002 19:33:37.225060 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:33:37.310307 kubelet[2060]: I1002 19:33:37.310271 2060 scope.go:115] "RemoveContainer" containerID="ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113" Oct 2 19:33:37.310668 kubelet[2060]: I1002 19:33:37.310647 2060 scope.go:115] "RemoveContainer" containerID="ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113" Oct 2 19:33:37.312109 env[1094]: time="2023-10-02T19:33:37.312021185Z" level=info msg="RemoveContainer for \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\"" Oct 2 19:33:37.312242 env[1094]: time="2023-10-02T19:33:37.312201268Z" level=info msg="RemoveContainer for \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\"" Oct 2 19:33:37.312437 env[1094]: time="2023-10-02T19:33:37.312315555Z" level=error msg="RemoveContainer for \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\" failed" error="failed to set removing state for container \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\": container is already in removing state" Oct 2 19:33:37.312537 kubelet[2060]: E1002 19:33:37.312460 2060 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\": container is already in removing state" containerID="ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113" Oct 2 19:33:37.312537 kubelet[2060]: E1002 19:33:37.312486 2060 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113": container is already in removing state; Skipping pod "cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)" Oct 2 19:33:37.312537 kubelet[2060]: E1002 19:33:37.312534 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:37.312770 kubelet[2060]: E1002 19:33:37.312724 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:33:37.315054 env[1094]: time="2023-10-02T19:33:37.315007517Z" level=info msg="RemoveContainer for \"ced3def4cbb56f08b33ac75ace84567090e00c24e9d2f4c79cbb22d91e62d113\" returns successfully" Oct 2 19:33:37.900503 systemd[1]: Started sshd@9-10.0.0.13:22-10.0.0.1:35934.service. Oct 2 19:33:37.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.13:22-10.0.0.1:35934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:37.903515 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:33:37.903579 kernel: audit: type=1130 audit(1696275217.900:1137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.13:22-10.0.0.1:35934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:37.937000 audit[2643]: USER_ACCT pid=2643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:37.938470 sshd[2643]: Accepted publickey for core from 10.0.0.1 port 35934 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:33:37.941205 sshd[2643]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:37.940000 audit[2643]: CRED_ACQ pid=2643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:37.944003 kernel: audit: type=1101 audit(1696275217.937:1138): pid=2643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:37.944076 kernel: audit: type=1103 audit(1696275217.940:1139): pid=2643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:37.944107 kernel: audit: type=1006 audit(1696275217.940:1140): pid=2643 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:33:37.944936 systemd-logind[1077]: New session 10 of user core. Oct 2 19:33:37.940000 audit[2643]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe08952e10 a2=3 a3=0 items=0 ppid=1 pid=2643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:37.945909 systemd[1]: Started session-10.scope. Oct 2 19:33:37.949531 kernel: audit: type=1300 audit(1696275217.940:1140): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe08952e10 a2=3 a3=0 items=0 ppid=1 pid=2643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:37.940000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:37.950000 audit[2643]: USER_START pid=2643 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:37.954335 kernel: audit: type=1327 audit(1696275217.940:1140): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:37.954400 kernel: audit: type=1105 audit(1696275217.950:1141): pid=2643 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:37.954431 kernel: audit: type=1103 audit(1696275217.952:1142): pid=2645 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:37.952000 audit[2645]: CRED_ACQ pid=2645 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:38.047766 sshd[2643]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:38.048000 audit[2643]: USER_END pid=2643 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:38.051058 systemd[1]: sshd@9-10.0.0.13:22-10.0.0.1:35934.service: Deactivated successfully. Oct 2 19:33:38.051994 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:33:38.052758 systemd-logind[1077]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:33:38.049000 audit[2643]: CRED_DISP pid=2643 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:38.053709 systemd-logind[1077]: Removed session 10. Oct 2 19:33:38.055530 kernel: audit: type=1106 audit(1696275218.048:1143): pid=2643 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:38.055592 kernel: audit: type=1104 audit(1696275218.049:1144): pid=2643 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:38.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.13:22-10.0.0.1:35934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:38.175123 systemd[1]: run-containerd-runc-k8s.io-2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff-runc.ZKLuzU.mount: Deactivated successfully. Oct 2 19:33:38.175235 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff-rootfs.mount: Deactivated successfully. Oct 2 19:33:40.315209 kubelet[2060]: W1002 19:33:40.315148 2060 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod59fe0e9b_3ccd_4afd_b658_8ce2630334e3.slice/cri-containerd-2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff.scope WatchSource:0}: task 2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff not found: not found Oct 2 19:33:45.624145 kubelet[2060]: I1002 19:33:45.624118 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:45.624145 kubelet[2060]: I1002 19:33:45.624147 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:33:45.625992 kubelet[2060]: I1002 19:33:45.625936 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:33:45.638047 kubelet[2060]: I1002 19:33:45.638002 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:45.638213 kubelet[2060]: I1002 19:33:45.638090 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:33:45.638213 kubelet[2060]: E1002 19:33:45.638109 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:33:45.638213 kubelet[2060]: E1002 19:33:45.638120 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:33:45.638213 kubelet[2060]: E1002 19:33:45.638129 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:33:45.638213 kubelet[2060]: E1002 19:33:45.638137 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:33:45.638213 kubelet[2060]: E1002 19:33:45.638145 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:33:45.638213 kubelet[2060]: E1002 19:33:45.638153 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:33:45.638213 kubelet[2060]: I1002 19:33:45.638161 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:33:46.159429 kubelet[2060]: E1002 19:33:46.159385 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:48.051844 systemd[1]: Started sshd@10-10.0.0.13:22-10.0.0.1:56946.service. Oct 2 19:33:48.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.13:22-10.0.0.1:56946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:48.054610 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:48.054653 kernel: audit: type=1130 audit(1696275228.050:1146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.13:22-10.0.0.1:56946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:48.084000 audit[2658]: USER_ACCT pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.086017 sshd[2658]: Accepted publickey for core from 10.0.0.1 port 56946 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:33:48.086000 audit[2658]: CRED_ACQ pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.088616 sshd[2658]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:48.090630 kernel: audit: type=1101 audit(1696275228.084:1147): pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.090699 kernel: audit: type=1103 audit(1696275228.086:1148): pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.090720 kernel: audit: type=1006 audit(1696275228.086:1149): pid=2658 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:33:48.091520 systemd-logind[1077]: New session 11 of user core. Oct 2 19:33:48.086000 audit[2658]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd5028620 a2=3 a3=0 items=0 ppid=1 pid=2658 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:48.092196 systemd[1]: Started session-11.scope. Oct 2 19:33:48.094614 kernel: audit: type=1300 audit(1696275228.086:1149): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd5028620 a2=3 a3=0 items=0 ppid=1 pid=2658 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:48.094658 kernel: audit: type=1327 audit(1696275228.086:1149): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:48.086000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:48.094000 audit[2658]: USER_START pid=2658 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.095000 audit[2660]: CRED_ACQ pid=2660 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.100705 kernel: audit: type=1105 audit(1696275228.094:1150): pid=2658 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.100743 kernel: audit: type=1103 audit(1696275228.095:1151): pid=2660 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.186674 sshd[2658]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:48.185000 audit[2658]: USER_END pid=2658 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.188778 systemd[1]: sshd@10-10.0.0.13:22-10.0.0.1:56946.service: Deactivated successfully. Oct 2 19:33:48.189486 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:33:48.190057 systemd-logind[1077]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:33:48.185000 audit[2658]: CRED_DISP pid=2658 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.190735 systemd-logind[1077]: Removed session 11. Oct 2 19:33:48.192454 kernel: audit: type=1106 audit(1696275228.185:1152): pid=2658 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.192513 kernel: audit: type=1104 audit(1696275228.185:1153): pid=2658 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:48.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.13:22-10.0.0.1:56946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:52.159283 kubelet[2060]: E1002 19:33:52.159252 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:33:52.159706 kubelet[2060]: E1002 19:33:52.159441 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:33:55.648886 kubelet[2060]: I1002 19:33:55.648860 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:55.648886 kubelet[2060]: I1002 19:33:55.648884 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:33:55.650229 kubelet[2060]: I1002 19:33:55.650207 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:33:55.658347 kubelet[2060]: I1002 19:33:55.658332 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:33:55.658449 kubelet[2060]: I1002 19:33:55.658408 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:33:55.658449 kubelet[2060]: E1002 19:33:55.658424 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:33:55.658449 kubelet[2060]: E1002 19:33:55.658434 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:33:55.658449 kubelet[2060]: E1002 19:33:55.658443 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:33:55.658546 kubelet[2060]: E1002 19:33:55.658452 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:33:55.658546 kubelet[2060]: E1002 19:33:55.658460 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:33:55.658546 kubelet[2060]: E1002 19:33:55.658467 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:33:55.658546 kubelet[2060]: I1002 19:33:55.658476 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:33:58.190644 systemd[1]: Started sshd@11-10.0.0.13:22-10.0.0.1:40198.service. Oct 2 19:33:58.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.13:22-10.0.0.1:40198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:58.193357 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:58.193467 kernel: audit: type=1130 audit(1696275238.189:1155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.13:22-10.0.0.1:40198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:58.223000 audit[2673]: USER_ACCT pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.224920 sshd[2673]: Accepted publickey for core from 10.0.0.1 port 40198 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:33:58.226741 sshd[2673]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:58.224000 audit[2673]: CRED_ACQ pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.229521 kernel: audit: type=1101 audit(1696275238.223:1156): pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.229666 kernel: audit: type=1103 audit(1696275238.224:1157): pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.229689 kernel: audit: type=1006 audit(1696275238.224:1158): pid=2673 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:33:58.229957 systemd-logind[1077]: New session 12 of user core. Oct 2 19:33:58.230652 systemd[1]: Started session-12.scope. Oct 2 19:33:58.224000 audit[2673]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc55df4c0 a2=3 a3=0 items=0 ppid=1 pid=2673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:58.233446 kernel: audit: type=1300 audit(1696275238.224:1158): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc55df4c0 a2=3 a3=0 items=0 ppid=1 pid=2673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:58.233492 kernel: audit: type=1327 audit(1696275238.224:1158): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:58.224000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:58.232000 audit[2673]: USER_START pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.237028 kernel: audit: type=1105 audit(1696275238.232:1159): pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.237070 kernel: audit: type=1103 audit(1696275238.233:1160): pid=2675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.233000 audit[2675]: CRED_ACQ pid=2675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.325135 sshd[2673]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:58.324000 audit[2673]: USER_END pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.327017 systemd[1]: sshd@11-10.0.0.13:22-10.0.0.1:40198.service: Deactivated successfully. Oct 2 19:33:58.327681 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:33:58.328431 systemd-logind[1077]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:33:58.324000 audit[2673]: CRED_DISP pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.329085 systemd-logind[1077]: Removed session 12. Oct 2 19:33:58.331124 kernel: audit: type=1106 audit(1696275238.324:1161): pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.331168 kernel: audit: type=1104 audit(1696275238.324:1162): pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:33:58.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.13:22-10.0.0.1:40198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:01.158877 kubelet[2060]: E1002 19:34:01.158846 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:05.159396 kubelet[2060]: E1002 19:34:05.159362 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:05.669769 kubelet[2060]: I1002 19:34:05.669746 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:05.669769 kubelet[2060]: I1002 19:34:05.669775 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:34:05.670821 kubelet[2060]: I1002 19:34:05.670805 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:34:05.680072 kubelet[2060]: I1002 19:34:05.680048 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:05.680156 kubelet[2060]: I1002 19:34:05.680138 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:34:05.680208 kubelet[2060]: E1002 19:34:05.680163 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:34:05.680208 kubelet[2060]: E1002 19:34:05.680175 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:34:05.680208 kubelet[2060]: E1002 19:34:05.680186 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:34:05.680208 kubelet[2060]: E1002 19:34:05.680194 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:34:05.680208 kubelet[2060]: E1002 19:34:05.680203 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:34:05.680341 kubelet[2060]: E1002 19:34:05.680215 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:34:05.680341 kubelet[2060]: I1002 19:34:05.680226 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:34:06.158789 kubelet[2060]: E1002 19:34:06.158762 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:06.158968 kubelet[2060]: E1002 19:34:06.158954 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:34:08.329553 systemd[1]: Started sshd@12-10.0.0.13:22-10.0.0.1:34830.service. Oct 2 19:34:08.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.13:22-10.0.0.1:34830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:08.332639 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:34:08.332700 kernel: audit: type=1130 audit(1696275248.329:1164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.13:22-10.0.0.1:34830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:08.362000 audit[2689]: USER_ACCT pid=2689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.363533 sshd[2689]: Accepted publickey for core from 10.0.0.1 port 34830 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:34:08.364995 sshd[2689]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:08.364000 audit[2689]: CRED_ACQ pid=2689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.369620 kernel: audit: type=1101 audit(1696275248.362:1165): pid=2689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.369681 kernel: audit: type=1103 audit(1696275248.364:1166): pid=2689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.369702 kernel: audit: type=1006 audit(1696275248.364:1167): pid=2689 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:34:08.369719 kernel: audit: type=1300 audit(1696275248.364:1167): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe045ebe10 a2=3 a3=0 items=0 ppid=1 pid=2689 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:08.364000 audit[2689]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe045ebe10 a2=3 a3=0 items=0 ppid=1 pid=2689 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:08.368910 systemd[1]: Started session-13.scope. Oct 2 19:34:08.369027 systemd-logind[1077]: New session 13 of user core. Oct 2 19:34:08.373080 kernel: audit: type=1327 audit(1696275248.364:1167): proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:08.364000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:08.372000 audit[2689]: USER_START pid=2689 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.375934 kernel: audit: type=1105 audit(1696275248.372:1168): pid=2689 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.375977 kernel: audit: type=1103 audit(1696275248.373:1169): pid=2691 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.373000 audit[2691]: CRED_ACQ pid=2691 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.466475 sshd[2689]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:08.466000 audit[2689]: USER_END pid=2689 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.468792 systemd[1]: sshd@12-10.0.0.13:22-10.0.0.1:34830.service: Deactivated successfully. Oct 2 19:34:08.466000 audit[2689]: CRED_DISP pid=2689 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.469585 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:34:08.470178 systemd-logind[1077]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:34:08.470817 systemd-logind[1077]: Removed session 13. Oct 2 19:34:08.472458 kernel: audit: type=1106 audit(1696275248.466:1170): pid=2689 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.472501 kernel: audit: type=1104 audit(1696275248.466:1171): pid=2689 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:08.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.13:22-10.0.0.1:34830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:15.696795 kubelet[2060]: I1002 19:34:15.696767 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:15.696795 kubelet[2060]: I1002 19:34:15.696800 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:34:15.698182 kubelet[2060]: I1002 19:34:15.698163 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:34:15.707379 kubelet[2060]: I1002 19:34:15.707358 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:15.707488 kubelet[2060]: I1002 19:34:15.707424 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:34:15.707488 kubelet[2060]: E1002 19:34:15.707446 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:34:15.707488 kubelet[2060]: E1002 19:34:15.707459 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:34:15.707488 kubelet[2060]: E1002 19:34:15.707467 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:34:15.707488 kubelet[2060]: E1002 19:34:15.707479 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:34:15.707488 kubelet[2060]: E1002 19:34:15.707491 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:34:15.707706 kubelet[2060]: E1002 19:34:15.707504 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:34:15.707706 kubelet[2060]: I1002 19:34:15.707515 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:34:18.470694 systemd[1]: Started sshd@13-10.0.0.13:22-10.0.0.1:60068.service. Oct 2 19:34:18.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.13:22-10.0.0.1:60068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:18.473550 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:34:18.473606 kernel: audit: type=1130 audit(1696275258.470:1173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.13:22-10.0.0.1:60068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:18.503000 audit[2703]: USER_ACCT pid=2703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.504515 sshd[2703]: Accepted publickey for core from 10.0.0.1 port 60068 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:34:18.506000 audit[2703]: CRED_ACQ pid=2703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.506942 sshd[2703]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:18.509157 kernel: audit: type=1101 audit(1696275258.503:1174): pid=2703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.509228 kernel: audit: type=1103 audit(1696275258.506:1175): pid=2703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.509252 kernel: audit: type=1006 audit(1696275258.506:1176): pid=2703 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:34:18.510573 kernel: audit: type=1300 audit(1696275258.506:1176): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb9063f80 a2=3 a3=0 items=0 ppid=1 pid=2703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:18.506000 audit[2703]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb9063f80 a2=3 a3=0 items=0 ppid=1 pid=2703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:18.510812 systemd[1]: Started session-14.scope. Oct 2 19:34:18.511129 systemd-logind[1077]: New session 14 of user core. Oct 2 19:34:18.506000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:18.513847 kernel: audit: type=1327 audit(1696275258.506:1176): proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:18.514000 audit[2703]: USER_START pid=2703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.516000 audit[2705]: CRED_ACQ pid=2705 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.520777 kernel: audit: type=1105 audit(1696275258.514:1177): pid=2703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.520820 kernel: audit: type=1103 audit(1696275258.516:1178): pid=2705 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.615435 sshd[2703]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:18.615000 audit[2703]: USER_END pid=2703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.617443 systemd[1]: sshd@13-10.0.0.13:22-10.0.0.1:60068.service: Deactivated successfully. Oct 2 19:34:18.618199 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:34:18.618774 systemd-logind[1077]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:34:18.615000 audit[2703]: CRED_DISP pid=2703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.619459 systemd-logind[1077]: Removed session 14. Oct 2 19:34:18.621148 kernel: audit: type=1106 audit(1696275258.615:1179): pid=2703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.621203 kernel: audit: type=1104 audit(1696275258.615:1180): pid=2703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:18.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.13:22-10.0.0.1:60068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:21.158964 kubelet[2060]: E1002 19:34:21.158940 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:21.161461 env[1094]: time="2023-10-02T19:34:21.161412970Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:34:21.324792 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3887954833.mount: Deactivated successfully. Oct 2 19:34:21.403122 env[1094]: time="2023-10-02T19:34:21.403079101Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e\"" Oct 2 19:34:21.403351 env[1094]: time="2023-10-02T19:34:21.403325207Z" level=info msg="StartContainer for \"841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e\"" Oct 2 19:34:21.417565 systemd[1]: Started cri-containerd-841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e.scope. Oct 2 19:34:21.424812 systemd[1]: cri-containerd-841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e.scope: Deactivated successfully. Oct 2 19:34:21.425106 systemd[1]: Stopped cri-containerd-841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e.scope. Oct 2 19:34:21.532046 env[1094]: time="2023-10-02T19:34:21.531984564Z" level=info msg="shim disconnected" id=841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e Oct 2 19:34:21.532046 env[1094]: time="2023-10-02T19:34:21.532024260Z" level=warning msg="cleaning up after shim disconnected" id=841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e namespace=k8s.io Oct 2 19:34:21.532046 env[1094]: time="2023-10-02T19:34:21.532032004Z" level=info msg="cleaning up dead shim" Oct 2 19:34:21.537942 env[1094]: time="2023-10-02T19:34:21.537902487Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:34:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2740 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:34:21Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:34:21.538144 env[1094]: time="2023-10-02T19:34:21.538100132Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" Oct 2 19:34:21.538289 env[1094]: time="2023-10-02T19:34:21.538261838Z" level=error msg="Failed to pipe stderr of container \"841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e\"" error="reading from a closed fifo" Oct 2 19:34:21.538345 env[1094]: time="2023-10-02T19:34:21.538312444Z" level=error msg="Failed to pipe stdout of container \"841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e\"" error="reading from a closed fifo" Oct 2 19:34:21.600355 env[1094]: time="2023-10-02T19:34:21.600289536Z" level=error msg="StartContainer for \"841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:34:21.600526 kubelet[2060]: E1002 19:34:21.600499 2060 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e" Oct 2 19:34:21.600629 kubelet[2060]: E1002 19:34:21.600620 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:34:21.600629 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:34:21.600629 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:34:21.600629 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhbg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:34:21.600807 kubelet[2060]: E1002 19:34:21.600664 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:34:22.158462 kubelet[2060]: E1002 19:34:22.158430 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:22.321928 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e-rootfs.mount: Deactivated successfully. Oct 2 19:34:22.367911 kubelet[2060]: I1002 19:34:22.367893 2060 scope.go:115] "RemoveContainer" containerID="2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff" Oct 2 19:34:22.368226 kubelet[2060]: I1002 19:34:22.368181 2060 scope.go:115] "RemoveContainer" containerID="2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff" Oct 2 19:34:22.368622 env[1094]: time="2023-10-02T19:34:22.368574102Z" level=info msg="RemoveContainer for \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\"" Oct 2 19:34:22.368855 env[1094]: time="2023-10-02T19:34:22.368702065Z" level=info msg="RemoveContainer for \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\"" Oct 2 19:34:22.368855 env[1094]: time="2023-10-02T19:34:22.368773390Z" level=error msg="RemoveContainer for \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\" failed" error="failed to set removing state for container \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\": container is already in removing state" Oct 2 19:34:22.368928 kubelet[2060]: E1002 19:34:22.368896 2060 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\": container is already in removing state" containerID="2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff" Oct 2 19:34:22.368928 kubelet[2060]: E1002 19:34:22.368919 2060 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff": container is already in removing state; Skipping pod "cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)" Oct 2 19:34:22.369006 kubelet[2060]: E1002 19:34:22.368979 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:22.369212 kubelet[2060]: E1002 19:34:22.369198 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:34:22.437780 env[1094]: time="2023-10-02T19:34:22.437686702Z" level=info msg="RemoveContainer for \"2e06af027c3e3e8d41e9ea7d581a4d59b872dec5428282befd0dbb89c9339fff\" returns successfully" Oct 2 19:34:24.376000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:24.377782 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:34:24.377843 kernel: audit: type=1400 audit(1696275264.376:1183): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:24.376000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:24.382467 kernel: audit: type=1400 audit(1696275264.376:1182): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:24.382513 kernel: audit: type=1300 audit(1696275264.376:1182): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001497080 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:24.376000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001497080 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:24.385495 kernel: audit: type=1300 audit(1696275264.376:1183): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00238fad0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:24.376000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00238fad0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:24.376000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:24.391364 kernel: audit: type=1327 audit(1696275264.376:1182): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:24.391416 kernel: audit: type=1327 audit(1696275264.376:1183): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:24.376000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:24.635530 kubelet[2060]: W1002 19:34:24.635428 2060 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod59fe0e9b_3ccd_4afd_b658_8ce2630334e3.slice/cri-containerd-841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e.scope WatchSource:0}: task 841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e not found: not found Oct 2 19:34:25.052000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:25.052000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00a9ef650 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:34:25.061384 kernel: audit: type=1400 audit(1696275265.052:1184): avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:25.061436 kernel: audit: type=1300 audit(1696275265.052:1184): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00a9ef650 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:34:25.061455 kernel: audit: type=1327 audit(1696275265.052:1184): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:34:25.052000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:34:25.052000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:25.068315 kernel: audit: type=1400 audit(1696275265.052:1185): avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:25.052000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7069 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:25.052000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=59 a1=c00ac36780 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:34:25.052000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:34:25.052000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c002c17120 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:34:25.052000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:34:25.056000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7075 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:25.056000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00ac367b0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:34:25.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:34:25.057000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:25.057000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00ac368a0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:34:25.057000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:34:25.057000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:25.057000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c002c05bc0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:34:25.057000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:34:25.717179 kubelet[2060]: I1002 19:34:25.717135 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:25.717179 kubelet[2060]: I1002 19:34:25.717170 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:34:25.718380 kubelet[2060]: I1002 19:34:25.718349 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:34:25.729960 kubelet[2060]: I1002 19:34:25.729926 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:25.730088 kubelet[2060]: I1002 19:34:25.730004 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:34:25.730088 kubelet[2060]: E1002 19:34:25.730024 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:34:25.730088 kubelet[2060]: E1002 19:34:25.730035 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:34:25.730088 kubelet[2060]: E1002 19:34:25.730045 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:34:25.730088 kubelet[2060]: E1002 19:34:25.730054 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:34:25.730088 kubelet[2060]: E1002 19:34:25.730064 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:34:25.730088 kubelet[2060]: E1002 19:34:25.730073 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:34:25.730088 kubelet[2060]: I1002 19:34:25.730082 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:34:27.159026 kubelet[2060]: E1002 19:34:27.158986 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:28.620337 systemd[1]: Started sshd@14-10.0.0.13:22-10.0.0.1:41586.service. Oct 2 19:34:28.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.13:22-10.0.0.1:41586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:28.653000 audit[2754]: USER_ACCT pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:28.654640 sshd[2754]: Accepted publickey for core from 10.0.0.1 port 41586 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:34:28.654000 audit[2754]: CRED_ACQ pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:28.654000 audit[2754]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc32900240 a2=3 a3=0 items=0 ppid=1 pid=2754 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:28.654000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:28.655569 sshd[2754]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:28.659441 systemd-logind[1077]: New session 15 of user core. Oct 2 19:34:28.660276 systemd[1]: Started session-15.scope. Oct 2 19:34:28.664000 audit[2754]: USER_START pid=2754 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:28.665000 audit[2756]: CRED_ACQ pid=2756 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:28.760612 sshd[2754]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:28.761000 audit[2754]: USER_END pid=2754 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:28.761000 audit[2754]: CRED_DISP pid=2754 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:28.763050 systemd[1]: sshd@14-10.0.0.13:22-10.0.0.1:41586.service: Deactivated successfully. Oct 2 19:34:28.763680 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:34:28.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.13:22-10.0.0.1:41586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:28.764265 systemd-logind[1077]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:34:28.765014 systemd-logind[1077]: Removed session 15. Oct 2 19:34:29.169392 kubelet[2060]: E1002 19:34:29.169352 2060 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:34:29.175112 kubelet[2060]: E1002 19:34:29.175077 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:29.601000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:29.602926 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:34:29.603064 kernel: audit: type=1400 audit(1696275269.601:1199): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:29.601000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002548560 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:29.609487 kernel: audit: type=1300 audit(1696275269.601:1199): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002548560 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:29.609556 kernel: audit: type=1327 audit(1696275269.601:1199): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:29.601000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:29.612389 kernel: audit: type=1400 audit(1696275269.601:1200): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:29.601000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:29.601000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0001a6e00 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:29.619213 kernel: audit: type=1300 audit(1696275269.601:1200): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0001a6e00 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:29.619263 kernel: audit: type=1327 audit(1696275269.601:1200): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:29.601000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:29.603000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:29.624693 kernel: audit: type=1400 audit(1696275269.603:1201): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:29.624731 kernel: audit: type=1300 audit(1696275269.603:1201): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00117d520 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:29.603000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00117d520 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:29.627805 kernel: audit: type=1327 audit(1696275269.603:1201): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:29.603000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:29.630404 kernel: audit: type=1400 audit(1696275269.603:1202): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:29.603000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:29.603000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002548780 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:34:29.603000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:34.175768 kubelet[2060]: E1002 19:34:34.175733 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:35.741483 kubelet[2060]: I1002 19:34:35.741446 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:35.741483 kubelet[2060]: I1002 19:34:35.741471 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:34:35.742445 kubelet[2060]: I1002 19:34:35.742405 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:34:35.752234 kubelet[2060]: I1002 19:34:35.752199 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:35.752430 kubelet[2060]: I1002 19:34:35.752275 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:34:35.752430 kubelet[2060]: E1002 19:34:35.752296 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:34:35.752430 kubelet[2060]: E1002 19:34:35.752306 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:34:35.752430 kubelet[2060]: E1002 19:34:35.752314 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:34:35.752430 kubelet[2060]: E1002 19:34:35.752322 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:34:35.752430 kubelet[2060]: E1002 19:34:35.752330 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:34:35.752430 kubelet[2060]: E1002 19:34:35.752338 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:34:35.752430 kubelet[2060]: I1002 19:34:35.752346 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:34:37.158710 kubelet[2060]: E1002 19:34:37.158634 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:37.159121 kubelet[2060]: E1002 19:34:37.158876 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:34:38.765522 systemd[1]: Started sshd@15-10.0.0.13:22-10.0.0.1:39556.service. Oct 2 19:34:38.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.13:22-10.0.0.1:39556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:38.768592 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:34:38.768655 kernel: audit: type=1130 audit(1696275278.764:1203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.13:22-10.0.0.1:39556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:38.799000 audit[2772]: USER_ACCT pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.801474 sshd[2772]: Accepted publickey for core from 10.0.0.1 port 39556 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:34:38.803001 sshd[2772]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:38.801000 audit[2772]: CRED_ACQ pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.806253 systemd-logind[1077]: New session 16 of user core. Oct 2 19:34:38.806712 kernel: audit: type=1101 audit(1696275278.799:1204): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.806757 kernel: audit: type=1103 audit(1696275278.801:1205): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.806774 kernel: audit: type=1006 audit(1696275278.801:1206): pid=2772 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:34:38.807197 systemd[1]: Started session-16.scope. Oct 2 19:34:38.801000 audit[2772]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5d0ea7f0 a2=3 a3=0 items=0 ppid=1 pid=2772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:38.811798 kernel: audit: type=1300 audit(1696275278.801:1206): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5d0ea7f0 a2=3 a3=0 items=0 ppid=1 pid=2772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:38.811842 kernel: audit: type=1327 audit(1696275278.801:1206): proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:38.801000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:38.809000 audit[2772]: USER_START pid=2772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.815869 kernel: audit: type=1105 audit(1696275278.809:1207): pid=2772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.815901 kernel: audit: type=1103 audit(1696275278.810:1208): pid=2774 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.810000 audit[2774]: CRED_ACQ pid=2774 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.905285 sshd[2772]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:38.904000 audit[2772]: USER_END pid=2772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.907172 systemd[1]: sshd@15-10.0.0.13:22-10.0.0.1:39556.service: Deactivated successfully. Oct 2 19:34:38.907891 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:34:38.908424 systemd-logind[1077]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:34:38.909083 systemd-logind[1077]: Removed session 16. Oct 2 19:34:38.904000 audit[2772]: CRED_DISP pid=2772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.911981 kernel: audit: type=1106 audit(1696275278.904:1209): pid=2772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.912034 kernel: audit: type=1104 audit(1696275278.904:1210): pid=2772 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:38.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.13:22-10.0.0.1:39556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:39.176218 kubelet[2060]: E1002 19:34:39.176182 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:44.177391 kubelet[2060]: E1002 19:34:44.177354 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:45.763932 kubelet[2060]: I1002 19:34:45.763893 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:45.763932 kubelet[2060]: I1002 19:34:45.763925 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:34:45.765293 kubelet[2060]: I1002 19:34:45.765276 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:34:45.774460 kubelet[2060]: I1002 19:34:45.774438 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:45.774577 kubelet[2060]: I1002 19:34:45.774515 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:34:45.774577 kubelet[2060]: E1002 19:34:45.774536 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:34:45.774577 kubelet[2060]: E1002 19:34:45.774547 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:34:45.774577 kubelet[2060]: E1002 19:34:45.774557 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:34:45.774577 kubelet[2060]: E1002 19:34:45.774566 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:34:45.774577 kubelet[2060]: E1002 19:34:45.774574 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:34:45.774795 kubelet[2060]: E1002 19:34:45.774582 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:34:45.774795 kubelet[2060]: I1002 19:34:45.774591 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:34:48.910488 systemd[1]: Started sshd@16-10.0.0.13:22-10.0.0.1:34758.service. Oct 2 19:34:48.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.13:22-10.0.0.1:34758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:48.913403 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:34:48.913459 kernel: audit: type=1130 audit(1696275288.909:1212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.13:22-10.0.0.1:34758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:48.943000 audit[2788]: USER_ACCT pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:48.945360 sshd[2788]: Accepted publickey for core from 10.0.0.1 port 34758 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:34:48.947073 sshd[2788]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:48.945000 audit[2788]: CRED_ACQ pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:48.949977 kernel: audit: type=1101 audit(1696275288.943:1213): pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:48.950036 kernel: audit: type=1103 audit(1696275288.945:1214): pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:48.950060 kernel: audit: type=1006 audit(1696275288.945:1215): pid=2788 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:34:48.950499 systemd-logind[1077]: New session 17 of user core. Oct 2 19:34:48.951292 systemd[1]: Started session-17.scope. Oct 2 19:34:48.945000 audit[2788]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2b677ed0 a2=3 a3=0 items=0 ppid=1 pid=2788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:48.953920 kernel: audit: type=1300 audit(1696275288.945:1215): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2b677ed0 a2=3 a3=0 items=0 ppid=1 pid=2788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:48.953979 kernel: audit: type=1327 audit(1696275288.945:1215): proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:48.945000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:48.953000 audit[2788]: USER_START pid=2788 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:48.957736 kernel: audit: type=1105 audit(1696275288.953:1216): pid=2788 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:48.957776 kernel: audit: type=1103 audit(1696275288.954:1217): pid=2790 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:48.954000 audit[2790]: CRED_ACQ pid=2790 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.052627 sshd[2788]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:49.052000 audit[2788]: USER_END pid=2788 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.055608 systemd[1]: sshd@16-10.0.0.13:22-10.0.0.1:34758.service: Deactivated successfully. Oct 2 19:34:49.056294 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:34:49.052000 audit[2788]: CRED_DISP pid=2788 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.057929 systemd[1]: Started sshd@17-10.0.0.13:22-10.0.0.1:34764.service. Oct 2 19:34:49.059642 kernel: audit: type=1106 audit(1696275289.052:1218): pid=2788 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.059692 kernel: audit: type=1104 audit(1696275289.052:1219): pid=2788 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.13:22-10.0.0.1:34758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:49.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.13:22-10.0.0.1:34764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:49.060626 systemd-logind[1077]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:34:49.061401 systemd-logind[1077]: Removed session 17. Oct 2 19:34:49.091000 audit[2802]: USER_ACCT pid=2802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.093060 sshd[2802]: Accepted publickey for core from 10.0.0.1 port 34764 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:34:49.092000 audit[2802]: CRED_ACQ pid=2802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.092000 audit[2802]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf5aa0710 a2=3 a3=0 items=0 ppid=1 pid=2802 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:49.092000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:49.094204 sshd[2802]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:49.098192 systemd-logind[1077]: New session 18 of user core. Oct 2 19:34:49.099246 systemd[1]: Started session-18.scope. Oct 2 19:34:49.101000 audit[2802]: USER_START pid=2802 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.102000 audit[2804]: CRED_ACQ pid=2804 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.178952 kubelet[2060]: E1002 19:34:49.178843 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:49.834041 sshd[2802]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:49.833000 audit[2802]: USER_END pid=2802 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.833000 audit[2802]: CRED_DISP pid=2802 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.13:22-10.0.0.1:34770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:49.837224 systemd[1]: Started sshd@18-10.0.0.13:22-10.0.0.1:34770.service. Oct 2 19:34:49.837755 systemd[1]: sshd@17-10.0.0.13:22-10.0.0.1:34764.service: Deactivated successfully. Oct 2 19:34:49.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.13:22-10.0.0.1:34764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:49.840495 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:34:49.841325 systemd-logind[1077]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:34:49.842259 systemd-logind[1077]: Removed session 18. Oct 2 19:34:49.876000 audit[2812]: USER_ACCT pid=2812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.877977 sshd[2812]: Accepted publickey for core from 10.0.0.1 port 34770 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:34:49.877000 audit[2812]: CRED_ACQ pid=2812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.877000 audit[2812]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe26cabea0 a2=3 a3=0 items=0 ppid=1 pid=2812 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:49.877000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:49.879346 sshd[2812]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:49.882907 systemd-logind[1077]: New session 19 of user core. Oct 2 19:34:49.883852 systemd[1]: Started session-19.scope. Oct 2 19:34:49.886000 audit[2812]: USER_START pid=2812 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:49.887000 audit[2815]: CRED_ACQ pid=2815 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:50.008714 sshd[2812]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:50.007000 audit[2812]: USER_END pid=2812 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:50.008000 audit[2812]: CRED_DISP pid=2812 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:34:50.010767 systemd[1]: sshd@18-10.0.0.13:22-10.0.0.1:34770.service: Deactivated successfully. Oct 2 19:34:50.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.13:22-10.0.0.1:34770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.011588 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:34:50.012179 systemd-logind[1077]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:34:50.012864 systemd-logind[1077]: Removed session 19. Oct 2 19:34:50.159074 kubelet[2060]: E1002 19:34:50.158939 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:50.159265 kubelet[2060]: E1002 19:34:50.159145 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:34:51.159181 kubelet[2060]: E1002 19:34:51.159142 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:34:54.180173 kubelet[2060]: E1002 19:34:54.180138 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:55.789056 kubelet[2060]: I1002 19:34:55.789027 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:55.789056 kubelet[2060]: I1002 19:34:55.789057 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:34:55.790228 kubelet[2060]: I1002 19:34:55.790213 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:34:55.799179 kubelet[2060]: I1002 19:34:55.799147 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:34:55.799259 kubelet[2060]: I1002 19:34:55.799226 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:34:55.799259 kubelet[2060]: E1002 19:34:55.799249 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:34:55.799306 kubelet[2060]: E1002 19:34:55.799261 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:34:55.799306 kubelet[2060]: E1002 19:34:55.799271 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:34:55.799306 kubelet[2060]: E1002 19:34:55.799279 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:34:55.799306 kubelet[2060]: E1002 19:34:55.799289 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:34:55.799306 kubelet[2060]: E1002 19:34:55.799297 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:34:55.799306 kubelet[2060]: I1002 19:34:55.799306 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:34:59.181147 kubelet[2060]: E1002 19:34:59.181115 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:00.011972 systemd[1]: Started sshd@19-10.0.0.13:22-10.0.0.1:38416.service. Oct 2 19:35:00.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.13:22-10.0.0.1:38416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.012973 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:35:00.013040 kernel: audit: type=1130 audit(1696275300.011:1239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.13:22-10.0.0.1:38416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.045000 audit[2826]: USER_ACCT pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.046460 sshd[2826]: Accepted publickey for core from 10.0.0.1 port 38416 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:35:00.048622 sshd[2826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:00.047000 audit[2826]: CRED_ACQ pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.051309 kernel: audit: type=1101 audit(1696275300.045:1240): pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.051369 kernel: audit: type=1103 audit(1696275300.047:1241): pid=2826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.051401 kernel: audit: type=1006 audit(1696275300.047:1242): pid=2826 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:35:00.052196 systemd-logind[1077]: New session 20 of user core. Oct 2 19:35:00.047000 audit[2826]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb65be8a0 a2=3 a3=0 items=0 ppid=1 pid=2826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:00.053072 systemd[1]: Started session-20.scope. Oct 2 19:35:00.055569 kernel: audit: type=1300 audit(1696275300.047:1242): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb65be8a0 a2=3 a3=0 items=0 ppid=1 pid=2826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:00.055674 kernel: audit: type=1327 audit(1696275300.047:1242): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:00.047000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:00.057000 audit[2826]: USER_START pid=2826 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.058000 audit[2828]: CRED_ACQ pid=2828 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.062785 kernel: audit: type=1105 audit(1696275300.057:1243): pid=2826 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.062822 kernel: audit: type=1103 audit(1696275300.058:1244): pid=2828 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.157055 sshd[2826]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:00.157000 audit[2826]: USER_END pid=2826 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.159308 systemd[1]: sshd@19-10.0.0.13:22-10.0.0.1:38416.service: Deactivated successfully. Oct 2 19:35:00.160359 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:35:00.161029 systemd-logind[1077]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:35:00.157000 audit[2826]: CRED_DISP pid=2826 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.161959 systemd-logind[1077]: Removed session 20. Oct 2 19:35:00.163916 kernel: audit: type=1106 audit(1696275300.157:1245): pid=2826 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.163989 kernel: audit: type=1104 audit(1696275300.157:1246): pid=2826 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:00.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.13:22-10.0.0.1:38416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:03.158879 kubelet[2060]: E1002 19:35:03.158830 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:03.158879 kubelet[2060]: E1002 19:35:03.158873 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:03.159282 kubelet[2060]: E1002 19:35:03.159012 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:35:04.181708 kubelet[2060]: E1002 19:35:04.181678 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:05.813019 kubelet[2060]: I1002 19:35:05.812976 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:05.813019 kubelet[2060]: I1002 19:35:05.813011 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:35:05.815354 kubelet[2060]: I1002 19:35:05.815278 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:35:05.827075 kubelet[2060]: I1002 19:35:05.827037 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:05.827231 kubelet[2060]: I1002 19:35:05.827131 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:35:05.827231 kubelet[2060]: E1002 19:35:05.827157 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:35:05.827231 kubelet[2060]: E1002 19:35:05.827173 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:35:05.827231 kubelet[2060]: E1002 19:35:05.827185 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:35:05.827231 kubelet[2060]: E1002 19:35:05.827197 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:35:05.827231 kubelet[2060]: E1002 19:35:05.827210 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:35:05.827231 kubelet[2060]: E1002 19:35:05.827219 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:35:05.827231 kubelet[2060]: I1002 19:35:05.827228 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:35:07.159038 kubelet[2060]: E1002 19:35:07.158998 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:09.182430 kubelet[2060]: E1002 19:35:09.182404 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:10.160868 systemd[1]: Started sshd@20-10.0.0.13:22-10.0.0.1:56322.service. Oct 2 19:35:10.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.13:22-10.0.0.1:56322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:10.161690 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:35:10.161742 kernel: audit: type=1130 audit(1696275310.160:1248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.13:22-10.0.0.1:56322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:10.194000 audit[2841]: USER_ACCT pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.195434 sshd[2841]: Accepted publickey for core from 10.0.0.1 port 56322 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:35:10.196985 sshd[2841]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:10.196000 audit[2841]: CRED_ACQ pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.200409 systemd-logind[1077]: New session 21 of user core. Oct 2 19:35:10.201211 kernel: audit: type=1101 audit(1696275310.194:1249): pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.201375 kernel: audit: type=1103 audit(1696275310.196:1250): pid=2841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.201400 kernel: audit: type=1006 audit(1696275310.196:1251): pid=2841 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:35:10.201442 systemd[1]: Started session-21.scope. Oct 2 19:35:10.196000 audit[2841]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8f1a91c0 a2=3 a3=0 items=0 ppid=1 pid=2841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:10.206462 kernel: audit: type=1300 audit(1696275310.196:1251): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8f1a91c0 a2=3 a3=0 items=0 ppid=1 pid=2841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:10.206520 kernel: audit: type=1327 audit(1696275310.196:1251): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:10.196000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:10.205000 audit[2841]: USER_START pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.210396 kernel: audit: type=1105 audit(1696275310.205:1252): pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.210436 kernel: audit: type=1103 audit(1696275310.206:1253): pid=2843 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.206000 audit[2843]: CRED_ACQ pid=2843 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.303441 sshd[2841]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:10.303000 audit[2841]: USER_END pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.305826 systemd[1]: sshd@20-10.0.0.13:22-10.0.0.1:56322.service: Deactivated successfully. Oct 2 19:35:10.306657 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:35:10.307397 systemd-logind[1077]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:35:10.303000 audit[2841]: CRED_DISP pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.308156 systemd-logind[1077]: Removed session 21. Oct 2 19:35:10.310829 kernel: audit: type=1106 audit(1696275310.303:1254): pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.310897 kernel: audit: type=1104 audit(1696275310.303:1255): pid=2841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:10.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.13:22-10.0.0.1:56322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:14.183991 kubelet[2060]: E1002 19:35:14.183935 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:15.838085 kubelet[2060]: I1002 19:35:15.838054 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:15.838085 kubelet[2060]: I1002 19:35:15.838082 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:35:15.839415 kubelet[2060]: I1002 19:35:15.839390 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:35:15.840708 kubelet[2060]: I1002 19:35:15.840689 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" size=301773 Oct 2 19:35:15.840867 env[1094]: time="2023-10-02T19:35:15.840836045Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\"" Oct 2 19:35:15.842206 env[1094]: time="2023-10-02T19:35:15.842164448Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:35:15.842963 env[1094]: time="2023-10-02T19:35:15.842936336Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:35:15.843688 env[1094]: time="2023-10-02T19:35:15.843662387Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,XXX_unrecognized:[],}" Oct 2 19:35:15.845541 env[1094]: time="2023-10-02T19:35:15.845499634Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\" returns successfully" Oct 2 19:35:15.852885 kubelet[2060]: I1002 19:35:15.852868 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:15.852981 kubelet[2060]: I1002 19:35:15.852948 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:35:15.852981 kubelet[2060]: E1002 19:35:15.852968 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:35:15.852981 kubelet[2060]: E1002 19:35:15.852979 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:35:15.853080 kubelet[2060]: E1002 19:35:15.852988 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:35:15.853080 kubelet[2060]: E1002 19:35:15.852996 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:35:15.853080 kubelet[2060]: E1002 19:35:15.853004 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:35:15.853080 kubelet[2060]: E1002 19:35:15.853012 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:35:15.853080 kubelet[2060]: I1002 19:35:15.853021 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:35:18.158884 kubelet[2060]: E1002 19:35:18.158844 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:18.159271 kubelet[2060]: E1002 19:35:18.159037 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:35:19.184615 kubelet[2060]: E1002 19:35:19.184580 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:20.306946 systemd[1]: Started sshd@21-10.0.0.13:22-10.0.0.1:57292.service. Oct 2 19:35:20.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.13:22-10.0.0.1:57292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:20.307706 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:35:20.307744 kernel: audit: type=1130 audit(1696275320.305:1257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.13:22-10.0.0.1:57292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:20.339000 audit[2854]: USER_ACCT pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.341298 sshd[2854]: Accepted publickey for core from 10.0.0.1 port 57292 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:35:20.343055 sshd[2854]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:20.341000 audit[2854]: CRED_ACQ pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.345964 kernel: audit: type=1101 audit(1696275320.339:1258): pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.346003 kernel: audit: type=1103 audit(1696275320.341:1259): pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.346028 kernel: audit: type=1006 audit(1696275320.341:1260): pid=2854 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:35:20.346438 systemd-logind[1077]: New session 22 of user core. Oct 2 19:35:20.347472 systemd[1]: Started session-22.scope. Oct 2 19:35:20.341000 audit[2854]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4427d5e0 a2=3 a3=0 items=0 ppid=1 pid=2854 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:20.350241 kernel: audit: type=1300 audit(1696275320.341:1260): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4427d5e0 a2=3 a3=0 items=0 ppid=1 pid=2854 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:20.350344 kernel: audit: type=1327 audit(1696275320.341:1260): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:20.341000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:20.349000 audit[2854]: USER_START pid=2854 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.354363 kernel: audit: type=1105 audit(1696275320.349:1261): pid=2854 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.354403 kernel: audit: type=1103 audit(1696275320.351:1262): pid=2856 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.351000 audit[2856]: CRED_ACQ pid=2856 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.493996 sshd[2854]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:20.493000 audit[2854]: USER_END pid=2854 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.496579 systemd-logind[1077]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:35:20.496889 systemd[1]: sshd@21-10.0.0.13:22-10.0.0.1:57292.service: Deactivated successfully. Oct 2 19:35:20.497692 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:35:20.493000 audit[2854]: CRED_DISP pid=2854 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.498327 systemd-logind[1077]: Removed session 22. Oct 2 19:35:20.499891 kernel: audit: type=1106 audit(1696275320.493:1263): pid=2854 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.499934 kernel: audit: type=1104 audit(1696275320.493:1264): pid=2854 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:20.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.13:22-10.0.0.1:57292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:24.185158 kubelet[2060]: E1002 19:35:24.185122 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:24.377000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:24.377000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:24.377000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001050f00 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:35:24.377000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001630400 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:35:24.377000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:24.377000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:25.053000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:25.053000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7069 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:25.053000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c008f36bd0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:35:25.053000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c005311530 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:35:25.053000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:35:25.053000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:35:25.053000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:25.053000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c002a8a800 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:35:25.053000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:35:25.056000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7075 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:25.056000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c005311560 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:35:25.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:35:25.056000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:25.056000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c002bb57a0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:35:25.056000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:35:25.057000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:25.057000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c005311590 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:35:25.057000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:35:25.864455 kubelet[2060]: I1002 19:35:25.864412 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:25.864455 kubelet[2060]: I1002 19:35:25.864446 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:35:25.865731 kubelet[2060]: I1002 19:35:25.865715 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:35:25.877783 kubelet[2060]: I1002 19:35:25.877760 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:25.877942 kubelet[2060]: I1002 19:35:25.877847 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:35:25.877942 kubelet[2060]: E1002 19:35:25.877875 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:35:25.877942 kubelet[2060]: E1002 19:35:25.877886 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:35:25.877942 kubelet[2060]: E1002 19:35:25.877895 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:35:25.877942 kubelet[2060]: E1002 19:35:25.877903 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:35:25.877942 kubelet[2060]: E1002 19:35:25.877911 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:35:25.877942 kubelet[2060]: E1002 19:35:25.877920 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:35:25.877942 kubelet[2060]: I1002 19:35:25.877928 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:35:29.161087 kubelet[2060]: E1002 19:35:29.161043 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:29.161424 kubelet[2060]: E1002 19:35:29.161348 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:35:29.185744 kubelet[2060]: E1002 19:35:29.185719 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:29.601000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:29.605775 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:35:29.605850 kernel: audit: type=1400 audit(1696275329.601:1274): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:29.605898 kernel: audit: type=1400 audit(1696275329.601:1275): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:29.601000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:29.608151 kernel: audit: type=1300 audit(1696275329.601:1274): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00204a760 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:35:29.601000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00204a760 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:35:29.611339 kernel: audit: type=1327 audit(1696275329.601:1274): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:29.601000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:29.601000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00295dca0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:35:29.617162 kernel: audit: type=1300 audit(1696275329.601:1275): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00295dca0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:35:29.617212 kernel: audit: type=1327 audit(1696275329.601:1275): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:29.601000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:29.602000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:29.622895 kernel: audit: type=1400 audit(1696275329.602:1276): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:29.622951 kernel: audit: type=1300 audit(1696275329.602:1276): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0016307c0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:35:29.602000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0016307c0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:35:29.626160 kernel: audit: type=1327 audit(1696275329.602:1276): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:29.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:29.602000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:29.631267 kernel: audit: type=1400 audit(1696275329.602:1277): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:29.602000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0016308e0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:35:29.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:30.498413 systemd[1]: Started sshd@22-10.0.0.13:22-10.0.0.1:57296.service. Oct 2 19:35:30.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.13:22-10.0.0.1:57296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:30.534000 audit[2869]: USER_ACCT pid=2869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:30.534979 sshd[2869]: Accepted publickey for core from 10.0.0.1 port 57296 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:35:30.534000 audit[2869]: CRED_ACQ pid=2869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:30.535000 audit[2869]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb9bfb3e0 a2=3 a3=0 items=0 ppid=1 pid=2869 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:30.535000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:30.535831 sshd[2869]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:30.538733 systemd-logind[1077]: New session 23 of user core. Oct 2 19:35:30.539684 systemd[1]: Started session-23.scope. Oct 2 19:35:30.542000 audit[2869]: USER_START pid=2869 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:30.543000 audit[2871]: CRED_ACQ pid=2871 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:30.681023 sshd[2869]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:30.681000 audit[2869]: USER_END pid=2869 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:30.681000 audit[2869]: CRED_DISP pid=2869 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:30.683027 systemd[1]: sshd@22-10.0.0.13:22-10.0.0.1:57296.service: Deactivated successfully. Oct 2 19:35:30.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.13:22-10.0.0.1:57296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:30.683809 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:35:30.684353 systemd-logind[1077]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:35:30.684935 systemd-logind[1077]: Removed session 23. Oct 2 19:35:34.186797 kubelet[2060]: E1002 19:35:34.186760 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:35.889136 kubelet[2060]: I1002 19:35:35.889107 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:35.889136 kubelet[2060]: I1002 19:35:35.889135 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:35:35.891004 kubelet[2060]: I1002 19:35:35.890976 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:35:35.899532 kubelet[2060]: I1002 19:35:35.899513 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:35.899668 kubelet[2060]: I1002 19:35:35.899587 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:35:35.899668 kubelet[2060]: E1002 19:35:35.899620 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:35:35.899668 kubelet[2060]: E1002 19:35:35.899632 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:35:35.899668 kubelet[2060]: E1002 19:35:35.899642 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:35:35.899668 kubelet[2060]: E1002 19:35:35.899650 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:35:35.899668 kubelet[2060]: E1002 19:35:35.899659 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:35:35.899668 kubelet[2060]: E1002 19:35:35.899667 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:35:35.899835 kubelet[2060]: I1002 19:35:35.899676 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:35:39.187627 kubelet[2060]: E1002 19:35:39.187562 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:40.158509 kubelet[2060]: E1002 19:35:40.158470 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:40.685459 systemd[1]: Started sshd@23-10.0.0.13:22-10.0.0.1:39204.service. Oct 2 19:35:40.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.13:22-10.0.0.1:39204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:40.688306 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:35:40.688363 kernel: audit: type=1130 audit(1696275340.685:1287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.13:22-10.0.0.1:39204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:40.719000 audit[2884]: USER_ACCT pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.720784 sshd[2884]: Accepted publickey for core from 10.0.0.1 port 39204 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:35:40.722355 sshd[2884]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:40.726116 systemd-logind[1077]: New session 24 of user core. Oct 2 19:35:40.726420 systemd[1]: Started session-24.scope. Oct 2 19:35:40.721000 audit[2884]: CRED_ACQ pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.734894 kernel: audit: type=1101 audit(1696275340.719:1288): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.734942 kernel: audit: type=1103 audit(1696275340.721:1289): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.734973 kernel: audit: type=1006 audit(1696275340.721:1290): pid=2884 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:35:40.736336 kernel: audit: type=1300 audit(1696275340.721:1290): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf4087a00 a2=3 a3=0 items=0 ppid=1 pid=2884 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:40.721000 audit[2884]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf4087a00 a2=3 a3=0 items=0 ppid=1 pid=2884 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:40.738832 kernel: audit: type=1327 audit(1696275340.721:1290): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:40.721000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:40.730000 audit[2884]: USER_START pid=2884 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.742417 kernel: audit: type=1105 audit(1696275340.730:1291): pid=2884 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.742456 kernel: audit: type=1103 audit(1696275340.731:1292): pid=2886 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.731000 audit[2886]: CRED_ACQ pid=2886 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.830159 sshd[2884]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:40.830000 audit[2884]: USER_END pid=2884 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.832376 systemd[1]: sshd@23-10.0.0.13:22-10.0.0.1:39204.service: Deactivated successfully. Oct 2 19:35:40.833005 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:35:40.833592 systemd-logind[1077]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:35:40.830000 audit[2884]: CRED_DISP pid=2884 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.834236 systemd-logind[1077]: Removed session 24. Oct 2 19:35:40.836627 kernel: audit: type=1106 audit(1696275340.830:1293): pid=2884 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.836667 kernel: audit: type=1104 audit(1696275340.830:1294): pid=2884 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:40.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.13:22-10.0.0.1:39204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:43.159495 kubelet[2060]: E1002 19:35:43.159457 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:43.161575 env[1094]: time="2023-10-02T19:35:43.161535238Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:35:43.249591 env[1094]: time="2023-10-02T19:35:43.249518952Z" level=info msg="CreateContainer within sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb\"" Oct 2 19:35:43.250187 env[1094]: time="2023-10-02T19:35:43.250137944Z" level=info msg="StartContainer for \"06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb\"" Oct 2 19:35:43.266129 systemd[1]: Started cri-containerd-06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb.scope. Oct 2 19:35:43.274285 systemd[1]: cri-containerd-06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb.scope: Deactivated successfully. Oct 2 19:35:43.274536 systemd[1]: Stopped cri-containerd-06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb.scope. Oct 2 19:35:43.278417 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb-rootfs.mount: Deactivated successfully. Oct 2 19:35:43.385301 env[1094]: time="2023-10-02T19:35:43.385243330Z" level=info msg="shim disconnected" id=06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb Oct 2 19:35:43.385301 env[1094]: time="2023-10-02T19:35:43.385295841Z" level=warning msg="cleaning up after shim disconnected" id=06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb namespace=k8s.io Oct 2 19:35:43.385301 env[1094]: time="2023-10-02T19:35:43.385306130Z" level=info msg="cleaning up dead shim" Oct 2 19:35:43.391509 env[1094]: time="2023-10-02T19:35:43.391470092Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:35:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2920 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:35:43Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:35:43.391766 env[1094]: time="2023-10-02T19:35:43.391702615Z" level=error msg="copy shim log" error="read /proc/self/fd/30: file already closed" Oct 2 19:35:43.391946 env[1094]: time="2023-10-02T19:35:43.391899401Z" level=error msg="Failed to pipe stderr of container \"06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb\"" error="reading from a closed fifo" Oct 2 19:35:43.391946 env[1094]: time="2023-10-02T19:35:43.391889252Z" level=error msg="Failed to pipe stdout of container \"06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb\"" error="reading from a closed fifo" Oct 2 19:35:43.584874 env[1094]: time="2023-10-02T19:35:43.584805399Z" level=error msg="StartContainer for \"06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:35:43.585131 kubelet[2060]: E1002 19:35:43.585006 2060 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb" Oct 2 19:35:43.585131 kubelet[2060]: E1002 19:35:43.585118 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:35:43.585131 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:35:43.585131 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:35:43.585263 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pwhbg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:35:43.585324 kubelet[2060]: E1002 19:35:43.585151 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:35:43.586965 kubelet[2060]: I1002 19:35:43.586942 2060 scope.go:115] "RemoveContainer" containerID="841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e" Oct 2 19:35:43.587706 env[1094]: time="2023-10-02T19:35:43.587673862Z" level=info msg="RemoveContainer for \"841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e\"" Oct 2 19:35:43.732308 env[1094]: time="2023-10-02T19:35:43.732246455Z" level=info msg="RemoveContainer for \"841b47b77e60bb0d6d2b5ad7a7fcb0bcd2728fd7ca4b39b3a77aea03496a7d6e\" returns successfully" Oct 2 19:35:44.188853 kubelet[2060]: E1002 19:35:44.188823 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:44.590375 kubelet[2060]: E1002 19:35:44.590347 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:44.590618 kubelet[2060]: E1002 19:35:44.590577 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:35:46.490887 kubelet[2060]: W1002 19:35:46.490849 2060 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod59fe0e9b_3ccd_4afd_b658_8ce2630334e3.slice/cri-containerd-06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb.scope WatchSource:0}: task 06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb not found: not found Oct 2 19:35:46.502123 kubelet[2060]: I1002 19:35:46.502096 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:46.502123 kubelet[2060]: I1002 19:35:46.502123 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:35:46.503318 kubelet[2060]: I1002 19:35:46.503273 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:35:46.513510 kubelet[2060]: I1002 19:35:46.513475 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:46.513678 kubelet[2060]: I1002 19:35:46.513575 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:35:46.513678 kubelet[2060]: E1002 19:35:46.513616 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:35:46.513678 kubelet[2060]: E1002 19:35:46.513631 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:35:46.513678 kubelet[2060]: E1002 19:35:46.513643 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:35:46.513678 kubelet[2060]: E1002 19:35:46.513654 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:35:46.513678 kubelet[2060]: E1002 19:35:46.513666 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:35:46.513883 kubelet[2060]: E1002 19:35:46.513687 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:35:46.513883 kubelet[2060]: I1002 19:35:46.513702 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:35:49.189561 kubelet[2060]: E1002 19:35:49.189526 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:50.834282 systemd[1]: Started sshd@24-10.0.0.13:22-10.0.0.1:46374.service. Oct 2 19:35:50.835459 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:35:50.835500 kernel: audit: type=1130 audit(1696275350.832:1296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.13:22-10.0.0.1:46374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:50.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.13:22-10.0.0.1:46374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:50.867000 audit[2933]: USER_ACCT pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.869162 sshd[2933]: Accepted publickey for core from 10.0.0.1 port 46374 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:35:50.870000 audit[2933]: CRED_ACQ pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.872313 sshd[2933]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:50.874417 kernel: audit: type=1101 audit(1696275350.867:1297): pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.874476 kernel: audit: type=1103 audit(1696275350.870:1298): pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.874500 kernel: audit: type=1006 audit(1696275350.870:1299): pid=2933 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:35:50.875960 kernel: audit: type=1300 audit(1696275350.870:1299): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf4124460 a2=3 a3=0 items=0 ppid=1 pid=2933 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:50.870000 audit[2933]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf4124460 a2=3 a3=0 items=0 ppid=1 pid=2933 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:50.876506 systemd-logind[1077]: New session 25 of user core. Oct 2 19:35:50.877529 systemd[1]: Started session-25.scope. Oct 2 19:35:50.870000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:50.880051 kernel: audit: type=1327 audit(1696275350.870:1299): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:50.880000 audit[2933]: USER_START pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.881000 audit[2935]: CRED_ACQ pid=2935 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.888056 kernel: audit: type=1105 audit(1696275350.880:1300): pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.888152 kernel: audit: type=1103 audit(1696275350.881:1301): pid=2935 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.979107 sshd[2933]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:50.978000 audit[2933]: USER_END pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.980943 systemd[1]: sshd@24-10.0.0.13:22-10.0.0.1:46374.service: Deactivated successfully. Oct 2 19:35:50.981541 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:35:50.982012 systemd-logind[1077]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:35:50.982569 systemd-logind[1077]: Removed session 25. Oct 2 19:35:50.978000 audit[2933]: CRED_DISP pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.985308 kernel: audit: type=1106 audit(1696275350.978:1302): pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.985379 kernel: audit: type=1104 audit(1696275350.978:1303): pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:35:50.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.13:22-10.0.0.1:46374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:54.190934 kubelet[2060]: E1002 19:35:54.190877 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:56.158710 kubelet[2060]: E1002 19:35:56.158664 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:56.525516 kubelet[2060]: I1002 19:35:56.525414 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:56.525516 kubelet[2060]: I1002 19:35:56.525444 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:35:56.526633 kubelet[2060]: I1002 19:35:56.526584 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:35:56.536319 kubelet[2060]: I1002 19:35:56.536299 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:35:56.536485 kubelet[2060]: I1002 19:35:56.536361 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:35:56.536485 kubelet[2060]: E1002 19:35:56.536381 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:35:56.536485 kubelet[2060]: E1002 19:35:56.536392 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:35:56.536485 kubelet[2060]: E1002 19:35:56.536401 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:35:56.536485 kubelet[2060]: E1002 19:35:56.536409 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:35:56.536485 kubelet[2060]: E1002 19:35:56.536419 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:35:56.536485 kubelet[2060]: E1002 19:35:56.536427 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:35:56.536485 kubelet[2060]: I1002 19:35:56.536435 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:35:57.158950 kubelet[2060]: E1002 19:35:57.158922 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:57.159437 kubelet[2060]: E1002 19:35:57.159150 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:35:58.158740 kubelet[2060]: E1002 19:35:58.158656 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:35:59.192180 kubelet[2060]: E1002 19:35:59.192140 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:00.983940 systemd[1]: Started sshd@25-10.0.0.13:22-10.0.0.1:59472.service. Oct 2 19:36:00.984838 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:36:00.984891 kernel: audit: type=1130 audit(1696275360.983:1305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.13:22-10.0.0.1:59472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:00.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.13:22-10.0.0.1:59472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:01.017000 audit[2946]: USER_ACCT pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.018668 sshd[2946]: Accepted publickey for core from 10.0.0.1 port 59472 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:36:01.020918 sshd[2946]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:01.020000 audit[2946]: CRED_ACQ pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.024674 systemd-logind[1077]: New session 26 of user core. Oct 2 19:36:01.025137 systemd[1]: Started session-26.scope. Oct 2 19:36:01.028250 kernel: audit: type=1101 audit(1696275361.017:1306): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.028360 kernel: audit: type=1103 audit(1696275361.020:1307): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.028396 kernel: audit: type=1006 audit(1696275361.020:1308): pid=2946 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:36:01.030092 kernel: audit: type=1300 audit(1696275361.020:1308): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff38b299f0 a2=3 a3=0 items=0 ppid=1 pid=2946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:01.020000 audit[2946]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff38b299f0 a2=3 a3=0 items=0 ppid=1 pid=2946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:01.033622 kernel: audit: type=1327 audit(1696275361.020:1308): proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:01.020000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:01.028000 audit[2946]: USER_START pid=2946 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.038625 kernel: audit: type=1105 audit(1696275361.028:1309): pid=2946 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.038674 kernel: audit: type=1103 audit(1696275361.029:1310): pid=2948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.029000 audit[2948]: CRED_ACQ pid=2948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.132725 sshd[2946]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:01.133000 audit[2946]: USER_END pid=2946 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.135137 systemd[1]: sshd@25-10.0.0.13:22-10.0.0.1:59472.service: Deactivated successfully. Oct 2 19:36:01.135791 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:36:01.133000 audit[2946]: CRED_DISP pid=2946 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.136758 systemd-logind[1077]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:36:01.137482 systemd-logind[1077]: Removed session 26. Oct 2 19:36:01.138986 kernel: audit: type=1106 audit(1696275361.133:1311): pid=2946 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.139064 kernel: audit: type=1104 audit(1696275361.133:1312): pid=2946 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:01.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.13:22-10.0.0.1:59472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:04.193588 kubelet[2060]: E1002 19:36:04.193550 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:06.549371 kubelet[2060]: I1002 19:36:06.549327 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:36:06.549371 kubelet[2060]: I1002 19:36:06.549368 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:36:06.550801 kubelet[2060]: I1002 19:36:06.550785 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:36:06.561483 kubelet[2060]: I1002 19:36:06.561450 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:36:06.561632 kubelet[2060]: I1002 19:36:06.561527 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:36:06.561632 kubelet[2060]: E1002 19:36:06.561550 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:36:06.561632 kubelet[2060]: E1002 19:36:06.561561 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:36:06.561632 kubelet[2060]: E1002 19:36:06.561571 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:36:06.561632 kubelet[2060]: E1002 19:36:06.561579 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:36:06.561632 kubelet[2060]: E1002 19:36:06.561587 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:36:06.561632 kubelet[2060]: E1002 19:36:06.561623 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:36:06.561632 kubelet[2060]: I1002 19:36:06.561635 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:36:09.195115 kubelet[2060]: E1002 19:36:09.195088 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:11.138448 systemd[1]: Started sshd@26-10.0.0.13:22-10.0.0.1:50218.service. Oct 2 19:36:11.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.13:22-10.0.0.1:50218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:11.139991 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:36:11.140056 kernel: audit: type=1130 audit(1696275371.138:1314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.13:22-10.0.0.1:50218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:11.158857 kubelet[2060]: E1002 19:36:11.158810 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:11.159315 kubelet[2060]: E1002 19:36:11.159107 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:36:11.174000 audit[2961]: USER_ACCT pid=2961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.175027 sshd[2961]: Accepted publickey for core from 10.0.0.1 port 50218 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:36:11.177000 audit[2961]: CRED_ACQ pid=2961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.178757 sshd[2961]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:11.181372 kernel: audit: type=1101 audit(1696275371.174:1315): pid=2961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.181478 kernel: audit: type=1103 audit(1696275371.177:1316): pid=2961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.181502 kernel: audit: type=1006 audit(1696275371.177:1317): pid=2961 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:36:11.182307 systemd-logind[1077]: New session 27 of user core. Oct 2 19:36:11.183213 systemd[1]: Started session-27.scope. Oct 2 19:36:11.183529 kernel: audit: type=1300 audit(1696275371.177:1317): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcffb79f70 a2=3 a3=0 items=0 ppid=1 pid=2961 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:11.177000 audit[2961]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcffb79f70 a2=3 a3=0 items=0 ppid=1 pid=2961 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:11.186200 kernel: audit: type=1327 audit(1696275371.177:1317): proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:11.177000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:11.187000 audit[2961]: USER_START pid=2961 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.189000 audit[2963]: CRED_ACQ pid=2963 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.193761 kernel: audit: type=1105 audit(1696275371.187:1318): pid=2961 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.193814 kernel: audit: type=1103 audit(1696275371.189:1319): pid=2963 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.286727 sshd[2961]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:11.287000 audit[2961]: USER_END pid=2961 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.289221 systemd[1]: sshd@26-10.0.0.13:22-10.0.0.1:50218.service: Deactivated successfully. Oct 2 19:36:11.290184 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:36:11.287000 audit[2961]: CRED_DISP pid=2961 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.291519 systemd-logind[1077]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:36:11.292392 systemd-logind[1077]: Removed session 27. Oct 2 19:36:11.293555 kernel: audit: type=1106 audit(1696275371.287:1320): pid=2961 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.293635 kernel: audit: type=1104 audit(1696275371.287:1321): pid=2961 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:11.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.13:22-10.0.0.1:50218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:14.199794 kubelet[2060]: E1002 19:36:14.199660 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:15.160705 kubelet[2060]: E1002 19:36:15.160659 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:16.575728 kubelet[2060]: I1002 19:36:16.575676 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:36:16.575728 kubelet[2060]: I1002 19:36:16.575706 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:36:16.577048 kubelet[2060]: I1002 19:36:16.577028 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:36:16.585951 kubelet[2060]: I1002 19:36:16.585929 2060 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:36:16.586094 kubelet[2060]: I1002 19:36:16.585999 2060 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-wbdgd kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jrbr8 kube-system/kube-proxy-5q9bs]" Oct 2 19:36:16.586094 kubelet[2060]: E1002 19:36:16.586021 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-wbdgd" Oct 2 19:36:16.586094 kubelet[2060]: E1002 19:36:16.586032 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:36:16.586094 kubelet[2060]: E1002 19:36:16.586042 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:36:16.586094 kubelet[2060]: E1002 19:36:16.586060 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:36:16.586094 kubelet[2060]: E1002 19:36:16.586068 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jrbr8" Oct 2 19:36:16.586094 kubelet[2060]: E1002 19:36:16.586077 2060 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-5q9bs" Oct 2 19:36:16.586094 kubelet[2060]: I1002 19:36:16.586086 2060 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:36:19.200957 kubelet[2060]: E1002 19:36:19.200919 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:21.291425 systemd[1]: Started sshd@27-10.0.0.13:22-10.0.0.1:49308.service. Oct 2 19:36:21.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.13:22-10.0.0.1:49308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:21.349720 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:36:21.349924 kernel: audit: type=1130 audit(1696275381.290:1323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.13:22-10.0.0.1:49308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:21.378000 audit[2974]: USER_ACCT pid=2974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.379692 sshd[2974]: Accepted publickey for core from 10.0.0.1 port 49308 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:36:21.463000 audit[2974]: CRED_ACQ pid=2974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.464828 sshd[2974]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:21.466687 kernel: audit: type=1101 audit(1696275381.378:1324): pid=2974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.466742 kernel: audit: type=1103 audit(1696275381.463:1325): pid=2974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.466761 kernel: audit: type=1006 audit(1696275381.463:1326): pid=2974 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:36:21.470119 kernel: audit: type=1300 audit(1696275381.463:1326): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe75bd69b0 a2=3 a3=0 items=0 ppid=1 pid=2974 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:21.463000 audit[2974]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe75bd69b0 a2=3 a3=0 items=0 ppid=1 pid=2974 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:21.468987 systemd[1]: Started session-28.scope. Oct 2 19:36:21.469368 systemd-logind[1077]: New session 28 of user core. Oct 2 19:36:21.470566 kernel: audit: type=1327 audit(1696275381.463:1326): proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:21.463000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:21.473000 audit[2974]: USER_START pid=2974 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.477000 audit[2978]: CRED_ACQ pid=2978 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.480436 kernel: audit: type=1105 audit(1696275381.473:1327): pid=2974 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.480486 kernel: audit: type=1103 audit(1696275381.477:1328): pid=2978 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.796134 sshd[2974]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:21.802630 kernel: audit: type=1106 audit(1696275381.795:1329): pid=2974 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.802713 kernel: audit: type=1104 audit(1696275381.795:1330): pid=2974 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.795000 audit[2974]: USER_END pid=2974 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.795000 audit[2974]: CRED_DISP pid=2974 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.798507 systemd[1]: sshd@27-10.0.0.13:22-10.0.0.1:49308.service: Deactivated successfully. Oct 2 19:36:21.798977 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:36:21.799495 systemd-logind[1077]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:36:21.800240 systemd[1]: Started sshd@28-10.0.0.13:22-10.0.0.1:49314.service. Oct 2 19:36:21.801014 systemd-logind[1077]: Removed session 28. Oct 2 19:36:21.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.13:22-10.0.0.1:49308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:21.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.13:22-10.0.0.1:49314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:21.833000 audit[2990]: USER_ACCT pid=2990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.834665 sshd[2990]: Accepted publickey for core from 10.0.0.1 port 49314 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:36:21.834000 audit[2990]: CRED_ACQ pid=2990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.834000 audit[2990]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcef0e010 a2=3 a3=0 items=0 ppid=1 pid=2990 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:21.834000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:21.835697 sshd[2990]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:21.838668 systemd-logind[1077]: New session 29 of user core. Oct 2 19:36:21.839349 systemd[1]: Started session-29.scope. Oct 2 19:36:21.841000 audit[2990]: USER_START pid=2990 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:21.841000 audit[2992]: CRED_ACQ pid=2992 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:22.159276 kubelet[2060]: E1002 19:36:22.159239 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:22.159705 kubelet[2060]: E1002 19:36:22.159477 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-wbdgd_kube-system(59fe0e9b-3ccd-4afd-b658-8ce2630334e3)\"" pod="kube-system/cilium-wbdgd" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 Oct 2 19:36:23.843495 env[1094]: time="2023-10-02T19:36:23.843428034Z" level=info msg="StopPodSandbox for \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\"" Oct 2 19:36:23.844063 env[1094]: time="2023-10-02T19:36:23.843536180Z" level=info msg="Container to stop \"06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:36:23.847068 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075-shm.mount: Deactivated successfully. Oct 2 19:36:23.853316 systemd[1]: cri-containerd-5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075.scope: Deactivated successfully. Oct 2 19:36:23.852000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:36:23.856000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:36:23.862947 env[1094]: time="2023-10-02T19:36:23.862902859Z" level=info msg="StopContainer for \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\" with timeout 30 (s)" Oct 2 19:36:23.863738 env[1094]: time="2023-10-02T19:36:23.863713091Z" level=info msg="Stop container \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\" with signal terminated" Oct 2 19:36:23.876493 systemd[1]: cri-containerd-fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7.scope: Deactivated successfully. Oct 2 19:36:23.875000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:36:23.879000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:36:23.882360 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075-rootfs.mount: Deactivated successfully. Oct 2 19:36:23.893569 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7-rootfs.mount: Deactivated successfully. Oct 2 19:36:23.908164 env[1094]: time="2023-10-02T19:36:23.906910094Z" level=info msg="shim disconnected" id=5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075 Oct 2 19:36:23.908164 env[1094]: time="2023-10-02T19:36:23.906964197Z" level=warning msg="cleaning up after shim disconnected" id=5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075 namespace=k8s.io Oct 2 19:36:23.908164 env[1094]: time="2023-10-02T19:36:23.906976360Z" level=info msg="cleaning up dead shim" Oct 2 19:36:23.908164 env[1094]: time="2023-10-02T19:36:23.906916155Z" level=info msg="shim disconnected" id=fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7 Oct 2 19:36:23.908164 env[1094]: time="2023-10-02T19:36:23.907059669Z" level=warning msg="cleaning up after shim disconnected" id=fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7 namespace=k8s.io Oct 2 19:36:23.908164 env[1094]: time="2023-10-02T19:36:23.907073204Z" level=info msg="cleaning up dead shim" Oct 2 19:36:23.916316 env[1094]: time="2023-10-02T19:36:23.916250997Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3037 runtime=io.containerd.runc.v2\n" Oct 2 19:36:23.916653 env[1094]: time="2023-10-02T19:36:23.916626812Z" level=info msg="TearDown network for sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" successfully" Oct 2 19:36:23.916713 env[1094]: time="2023-10-02T19:36:23.916655176Z" level=info msg="StopPodSandbox for \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" returns successfully" Oct 2 19:36:23.917207 env[1094]: time="2023-10-02T19:36:23.916873191Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3038 runtime=io.containerd.runc.v2\n" Oct 2 19:36:23.924843 env[1094]: time="2023-10-02T19:36:23.924770969Z" level=info msg="StopContainer for \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\" returns successfully" Oct 2 19:36:23.925472 env[1094]: time="2023-10-02T19:36:23.925432898Z" level=info msg="StopPodSandbox for \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\"" Oct 2 19:36:23.925530 env[1094]: time="2023-10-02T19:36:23.925489286Z" level=info msg="Container to stop \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:36:23.927338 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507-shm.mount: Deactivated successfully. Oct 2 19:36:23.938695 systemd[1]: cri-containerd-546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507.scope: Deactivated successfully. Oct 2 19:36:23.937000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:36:23.943000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:36:23.961473 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507-rootfs.mount: Deactivated successfully. Oct 2 19:36:23.968568 env[1094]: time="2023-10-02T19:36:23.968511927Z" level=info msg="shim disconnected" id=546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507 Oct 2 19:36:23.968568 env[1094]: time="2023-10-02T19:36:23.968568104Z" level=warning msg="cleaning up after shim disconnected" id=546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507 namespace=k8s.io Oct 2 19:36:23.968568 env[1094]: time="2023-10-02T19:36:23.968577201Z" level=info msg="cleaning up dead shim" Oct 2 19:36:23.976099 env[1094]: time="2023-10-02T19:36:23.976036134Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3079 runtime=io.containerd.runc.v2\n" Oct 2 19:36:23.976415 env[1094]: time="2023-10-02T19:36:23.976384857Z" level=info msg="TearDown network for sandbox \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" successfully" Oct 2 19:36:23.976535 env[1094]: time="2023-10-02T19:36:23.976417259Z" level=info msg="StopPodSandbox for \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" returns successfully" Oct 2 19:36:24.063089 kubelet[2060]: I1002 19:36:24.063013 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-clustermesh-secrets\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063089 kubelet[2060]: I1002 19:36:24.063081 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-config-path\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063585 kubelet[2060]: I1002 19:36:24.063113 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cni-path\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063585 kubelet[2060]: I1002 19:36:24.063140 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-hostproc\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063585 kubelet[2060]: I1002 19:36:24.063167 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-hubble-tls\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063585 kubelet[2060]: I1002 19:36:24.063194 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-pwhbg\" (UniqueName: \"kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-kube-api-access-pwhbg\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063585 kubelet[2060]: I1002 19:36:24.063219 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-host-proc-sys-net\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063585 kubelet[2060]: I1002 19:36:24.063242 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-cgroup\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063822 kubelet[2060]: I1002 19:36:24.063265 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-xtables-lock\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063822 kubelet[2060]: I1002 19:36:24.063287 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-bpf-maps\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063822 kubelet[2060]: I1002 19:36:24.063315 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-etc-cni-netd\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063822 kubelet[2060]: I1002 19:36:24.063338 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-host-proc-sys-kernel\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063822 kubelet[2060]: I1002 19:36:24.063361 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-run\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.063822 kubelet[2060]: I1002 19:36:24.063387 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-lib-modules\") pod \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\" (UID: \"59fe0e9b-3ccd-4afd-b658-8ce2630334e3\") " Oct 2 19:36:24.064024 kubelet[2060]: I1002 19:36:24.063466 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.064073 kubelet[2060]: I1002 19:36:24.064032 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.064633 kubelet[2060]: W1002 19:36:24.064184 2060 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/59fe0e9b-3ccd-4afd-b658-8ce2630334e3/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:36:24.064633 kubelet[2060]: I1002 19:36:24.064198 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-hostproc" (OuterVolumeSpecName: "hostproc") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.064633 kubelet[2060]: I1002 19:36:24.064263 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cni-path" (OuterVolumeSpecName: "cni-path") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.065368 kubelet[2060]: I1002 19:36:24.065216 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.065368 kubelet[2060]: I1002 19:36:24.065254 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.065368 kubelet[2060]: I1002 19:36:24.065261 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.065368 kubelet[2060]: I1002 19:36:24.065277 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.065368 kubelet[2060]: I1002 19:36:24.065295 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.065582 kubelet[2060]: I1002 19:36:24.065300 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:24.067552 kubelet[2060]: I1002 19:36:24.066498 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:36:24.083300 kubelet[2060]: I1002 19:36:24.083243 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:36:24.083816 kubelet[2060]: I1002 19:36:24.083791 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:36:24.084169 kubelet[2060]: I1002 19:36:24.084133 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-kube-api-access-pwhbg" (OuterVolumeSpecName: "kube-api-access-pwhbg") pod "59fe0e9b-3ccd-4afd-b658-8ce2630334e3" (UID: "59fe0e9b-3ccd-4afd-b658-8ce2630334e3"). InnerVolumeSpecName "kube-api-access-pwhbg". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:36:24.164533 kubelet[2060]: I1002 19:36:24.164388 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d-cilium-config-path\") pod \"4f26db9f-1d33-4cb5-a1cb-304eda8dda4d\" (UID: \"4f26db9f-1d33-4cb5-a1cb-304eda8dda4d\") " Oct 2 19:36:24.164533 kubelet[2060]: I1002 19:36:24.164438 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-bc8hj\" (UniqueName: \"kubernetes.io/projected/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d-kube-api-access-bc8hj\") pod \"4f26db9f-1d33-4cb5-a1cb-304eda8dda4d\" (UID: \"4f26db9f-1d33-4cb5-a1cb-304eda8dda4d\") " Oct 2 19:36:24.164533 kubelet[2060]: I1002 19:36:24.164478 2060 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164533 kubelet[2060]: I1002 19:36:24.164494 2060 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-pwhbg\" (UniqueName: \"kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-kube-api-access-pwhbg\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164533 kubelet[2060]: I1002 19:36:24.164508 2060 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164533 kubelet[2060]: I1002 19:36:24.164518 2060 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164533 kubelet[2060]: I1002 19:36:24.164529 2060 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164979 kubelet[2060]: I1002 19:36:24.164540 2060 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164979 kubelet[2060]: I1002 19:36:24.164548 2060 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164979 kubelet[2060]: I1002 19:36:24.164558 2060 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164979 kubelet[2060]: I1002 19:36:24.164567 2060 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164979 kubelet[2060]: I1002 19:36:24.164575 2060 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164979 kubelet[2060]: I1002 19:36:24.164583 2060 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164979 kubelet[2060]: I1002 19:36:24.164592 2060 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.164979 kubelet[2060]: I1002 19:36:24.164627 2060 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.165257 kubelet[2060]: I1002 19:36:24.164648 2060 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/59fe0e9b-3ccd-4afd-b658-8ce2630334e3-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.165257 kubelet[2060]: W1002 19:36:24.164799 2060 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:36:24.167632 kubelet[2060]: I1002 19:36:24.167560 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4f26db9f-1d33-4cb5-a1cb-304eda8dda4d" (UID: "4f26db9f-1d33-4cb5-a1cb-304eda8dda4d"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:36:24.167823 kubelet[2060]: I1002 19:36:24.167730 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d-kube-api-access-bc8hj" (OuterVolumeSpecName: "kube-api-access-bc8hj") pod "4f26db9f-1d33-4cb5-a1cb-304eda8dda4d" (UID: "4f26db9f-1d33-4cb5-a1cb-304eda8dda4d"). InnerVolumeSpecName "kube-api-access-bc8hj". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:36:24.202304 kubelet[2060]: E1002 19:36:24.202261 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:24.265429 kubelet[2060]: I1002 19:36:24.265364 2060 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-bc8hj\" (UniqueName: \"kubernetes.io/projected/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d-kube-api-access-bc8hj\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.265429 kubelet[2060]: I1002 19:36:24.265408 2060 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:36:24.378000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:24.378000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015bcae0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:36:24.378000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:24.378000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:24.378000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0000d31a0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:36:24.378000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:24.665526 kubelet[2060]: I1002 19:36:24.665492 2060 scope.go:115] "RemoveContainer" containerID="06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb" Oct 2 19:36:24.670070 env[1094]: time="2023-10-02T19:36:24.670015068Z" level=info msg="RemoveContainer for \"06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb\"" Oct 2 19:36:24.670198 systemd[1]: Removed slice kubepods-burstable-pod59fe0e9b_3ccd_4afd_b658_8ce2630334e3.slice. Oct 2 19:36:24.679483 systemd[1]: Removed slice kubepods-besteffort-pod4f26db9f_1d33_4cb5_a1cb_304eda8dda4d.slice. Oct 2 19:36:24.690014 env[1094]: time="2023-10-02T19:36:24.689951079Z" level=info msg="RemoveContainer for \"06a4333b6686a26b29e7527f0c30e565b4bdd041009993239ead6210429373cb\" returns successfully" Oct 2 19:36:24.690395 kubelet[2060]: I1002 19:36:24.690358 2060 scope.go:115] "RemoveContainer" containerID="fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7" Oct 2 19:36:24.693633 env[1094]: time="2023-10-02T19:36:24.693322945Z" level=info msg="RemoveContainer for \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\"" Oct 2 19:36:24.697852 env[1094]: time="2023-10-02T19:36:24.697709380Z" level=info msg="RemoveContainer for \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\" returns successfully" Oct 2 19:36:24.698036 kubelet[2060]: I1002 19:36:24.698007 2060 scope.go:115] "RemoveContainer" containerID="fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7" Oct 2 19:36:24.698727 env[1094]: time="2023-10-02T19:36:24.698526065Z" level=error msg="ContainerStatus for \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\": not found" Oct 2 19:36:24.699114 kubelet[2060]: E1002 19:36:24.699074 2060 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\": not found" containerID="fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7" Oct 2 19:36:24.699193 kubelet[2060]: I1002 19:36:24.699152 2060 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7} err="failed to get container status \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\": rpc error: code = NotFound desc = an error occurred when try to find container \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\": not found" Oct 2 19:36:24.847147 systemd[1]: var-lib-kubelet-pods-4f26db9f\x2d1d33\x2d4cb5\x2da1cb\x2d304eda8dda4d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dbc8hj.mount: Deactivated successfully. Oct 2 19:36:24.847286 systemd[1]: var-lib-kubelet-pods-59fe0e9b\x2d3ccd\x2d4afd\x2db658\x2d8ce2630334e3-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dpwhbg.mount: Deactivated successfully. Oct 2 19:36:24.847375 systemd[1]: var-lib-kubelet-pods-59fe0e9b\x2d3ccd\x2d4afd\x2db658\x2d8ce2630334e3-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:36:24.847468 systemd[1]: var-lib-kubelet-pods-59fe0e9b\x2d3ccd\x2d4afd\x2db658\x2d8ce2630334e3-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:36:25.054000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:25.054000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c002a1b700 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:36:25.054000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:36:25.054000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7069 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:25.054000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00ccec000 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:36:25.054000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:36:25.054000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:25.054000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007a6ce70 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:36:25.054000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:36:25.057000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7075 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:25.057000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00ccec030 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:36:25.057000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:36:25.057000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:25.057000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008f00c00 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:36:25.057000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:36:25.057000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:25.057000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00ccec060 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:36:25.057000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:36:25.135461 sshd[2990]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:25.134000 audit[2990]: USER_END pid=2990 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:25.134000 audit[2990]: CRED_DISP pid=2990 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:25.139267 systemd[1]: sshd@28-10.0.0.13:22-10.0.0.1:49314.service: Deactivated successfully. Oct 2 19:36:25.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.13:22-10.0.0.1:49314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:25.140014 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:36:25.140690 systemd-logind[1077]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:36:25.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.13:22-10.0.0.1:46984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:25.142001 systemd[1]: Started sshd@29-10.0.0.13:22-10.0.0.1:46984.service. Oct 2 19:36:25.142988 systemd-logind[1077]: Removed session 29. Oct 2 19:36:25.160044 env[1094]: time="2023-10-02T19:36:25.160000858Z" level=info msg="StopPodSandbox for \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\"" Oct 2 19:36:25.160522 env[1094]: time="2023-10-02T19:36:25.160453810Z" level=info msg="TearDown network for sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" successfully" Oct 2 19:36:25.160522 env[1094]: time="2023-10-02T19:36:25.160247368Z" level=info msg="StopContainer for \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\" with timeout 1 (s)" Oct 2 19:36:25.160764 env[1094]: time="2023-10-02T19:36:25.160521619Z" level=error msg="StopContainer for \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\": not found" Oct 2 19:36:25.160764 env[1094]: time="2023-10-02T19:36:25.160494166Z" level=info msg="StopPodSandbox for \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" returns successfully" Oct 2 19:36:25.160842 kubelet[2060]: E1002 19:36:25.160709 2060 remote_runtime.go:349] "StopContainer from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7\": not found" containerID="fd2a6ae1a8e2231ec9cac5552e069a8bba188c3d58fd706200d289177d0d2cf7" Oct 2 19:36:25.161552 env[1094]: time="2023-10-02T19:36:25.161519878Z" level=info msg="StopPodSandbox for \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\"" Oct 2 19:36:25.161672 env[1094]: time="2023-10-02T19:36:25.161586916Z" level=info msg="TearDown network for sandbox \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" successfully" Oct 2 19:36:25.161672 env[1094]: time="2023-10-02T19:36:25.161648984Z" level=info msg="StopPodSandbox for \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" returns successfully" Oct 2 19:36:25.162124 kubelet[2060]: I1002 19:36:25.162100 2060 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=4f26db9f-1d33-4cb5-a1cb-304eda8dda4d path="/var/lib/kubelet/pods/4f26db9f-1d33-4cb5-a1cb-304eda8dda4d/volumes" Oct 2 19:36:25.162537 kubelet[2060]: I1002 19:36:25.162493 2060 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=59fe0e9b-3ccd-4afd-b658-8ce2630334e3 path="/var/lib/kubelet/pods/59fe0e9b-3ccd-4afd-b658-8ce2630334e3/volumes" Oct 2 19:36:25.178000 audit[3097]: USER_ACCT pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:25.180670 sshd[3097]: Accepted publickey for core from 10.0.0.1 port 46984 ssh2: RSA SHA256:b8JkJ8STGPpktId2vNwDpv0odk05FCpuAkJstdQTTnk Oct 2 19:36:25.180000 audit[3097]: CRED_ACQ pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:25.180000 audit[3097]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce48b1b80 a2=3 a3=0 items=0 ppid=1 pid=3097 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:25.180000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:25.181987 sshd[3097]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:25.185862 systemd-logind[1077]: New session 30 of user core. Oct 2 19:36:25.186936 systemd[1]: Started session-30.scope. Oct 2 19:36:25.189000 audit[3097]: USER_START pid=3097 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:25.190000 audit[3099]: CRED_ACQ pid=3099 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:36:26.594969 kubelet[2060]: I1002 19:36:26.594926 2060 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:36:26.594969 kubelet[2060]: I1002 19:36:26.594960 2060 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:36:26.595781 env[1094]: time="2023-10-02T19:36:26.595732470Z" level=info msg="StopPodSandbox for \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\"" Oct 2 19:36:26.596019 env[1094]: time="2023-10-02T19:36:26.595817281Z" level=info msg="TearDown network for sandbox \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" successfully" Oct 2 19:36:26.596019 env[1094]: time="2023-10-02T19:36:26.595858299Z" level=info msg="StopPodSandbox for \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" returns successfully" Oct 2 19:36:26.596188 env[1094]: time="2023-10-02T19:36:26.596168569Z" level=info msg="RemovePodSandbox for \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\"" Oct 2 19:36:26.596236 env[1094]: time="2023-10-02T19:36:26.596191463Z" level=info msg="Forcibly stopping sandbox \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\"" Oct 2 19:36:26.596271 env[1094]: time="2023-10-02T19:36:26.596237601Z" level=info msg="TearDown network for sandbox \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" successfully" Oct 2 19:36:26.764987 env[1094]: time="2023-10-02T19:36:26.764933810Z" level=info msg="RemovePodSandbox \"546074fd108bc1b886d4931532fa1dd47b14cb13477548dab0727ba087241507\" returns successfully" Oct 2 19:36:26.765353 env[1094]: time="2023-10-02T19:36:26.765331967Z" level=info msg="StopPodSandbox for \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\"" Oct 2 19:36:26.765447 env[1094]: time="2023-10-02T19:36:26.765409715Z" level=info msg="TearDown network for sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" successfully" Oct 2 19:36:26.765476 env[1094]: time="2023-10-02T19:36:26.765447367Z" level=info msg="StopPodSandbox for \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" returns successfully" Oct 2 19:36:26.765657 env[1094]: time="2023-10-02T19:36:26.765637859Z" level=info msg="RemovePodSandbox for \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\"" Oct 2 19:36:26.765703 env[1094]: time="2023-10-02T19:36:26.765661825Z" level=info msg="Forcibly stopping sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\"" Oct 2 19:36:26.765740 env[1094]: time="2023-10-02T19:36:26.765721898Z" level=info msg="TearDown network for sandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" successfully" Oct 2 19:36:26.875113 env[1094]: time="2023-10-02T19:36:26.874952317Z" level=info msg="RemovePodSandbox \"5eb981f9d7647c9accfff3f191fd4153d3c83b72241194a763bf73850ddcd075\" returns successfully" Oct 2 19:36:26.875657 kubelet[2060]: I1002 19:36:26.875633 2060 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:36:26.877166 kubelet[2060]: I1002 19:36:26.877145 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c" size=18897442 Oct 2 19:36:26.877290 env[1094]: time="2023-10-02T19:36:26.877269455Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:36:26.956134 env[1094]: time="2023-10-02T19:36:26.956069790Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,XXX_unrecognized:[],}" Oct 2 19:36:27.031398 env[1094]: time="2023-10-02T19:36:27.031352661Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,XXX_unrecognized:[],}" Oct 2 19:36:27.500012 env[1094]: time="2023-10-02T19:36:27.499941583Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\" returns successfully" Oct 2 19:36:27.500235 kubelet[2060]: I1002 19:36:27.500205 2060 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b" size=166719855 Oct 2 19:36:27.500439 env[1094]: time="2023-10-02T19:36:27.500418400Z" level=info msg="RemoveImage \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:36:27.523201 env[1094]: time="2023-10-02T19:36:27.523124386Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,XXX_unrecognized:[],}" Oct 2 19:36:27.525970 env[1094]: time="2023-10-02T19:36:27.525942357Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,XXX_unrecognized:[],}" Oct 2 19:36:27.548011 kubelet[2060]: I1002 19:36:27.547979 2060 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:27.548224 kubelet[2060]: E1002 19:36:27.548210 2060 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4f26db9f-1d33-4cb5-a1cb-304eda8dda4d" containerName="cilium-operator" Oct 2 19:36:27.548315 kubelet[2060]: E1002 19:36:27.548300 2060 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.548410 kubelet[2060]: E1002 19:36:27.548394 2060 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.548494 kubelet[2060]: E1002 19:36:27.548480 2060 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.548574 kubelet[2060]: E1002 19:36:27.548558 2060 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.548782 kubelet[2060]: I1002 19:36:27.548769 2060 memory_manager.go:346] "RemoveStaleState removing state" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.548850 kubelet[2060]: I1002 19:36:27.548837 2060 memory_manager.go:346] "RemoveStaleState removing state" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.548919 kubelet[2060]: I1002 19:36:27.548905 2060 memory_manager.go:346] "RemoveStaleState removing state" podUID="4f26db9f-1d33-4cb5-a1cb-304eda8dda4d" containerName="cilium-operator" Oct 2 19:36:27.548994 kubelet[2060]: I1002 19:36:27.548980 2060 memory_manager.go:346] "RemoveStaleState removing state" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.549075 kubelet[2060]: I1002 19:36:27.549062 2060 memory_manager.go:346] "RemoveStaleState removing state" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.549166 kubelet[2060]: E1002 19:36:27.549151 2060 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.549237 kubelet[2060]: E1002 19:36:27.549223 2060 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.549321 kubelet[2060]: I1002 19:36:27.549305 2060 memory_manager.go:346] "RemoveStaleState removing state" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.549406 kubelet[2060]: I1002 19:36:27.549390 2060 memory_manager.go:346] "RemoveStaleState removing state" podUID="59fe0e9b-3ccd-4afd-b658-8ce2630334e3" containerName="mount-cgroup" Oct 2 19:36:27.555162 systemd[1]: Created slice kubepods-burstable-pod329e67c6_ec48_4c70_9319_8f0483c69cb2.slice. Oct 2 19:36:27.675138 env[1094]: time="2023-10-02T19:36:27.674961647Z" level=info msg="RemoveImage \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\" returns successfully" Oct 2 19:36:27.884103 env[1094]: time="2023-10-02T19:36:27.860324467Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rr4m5,Uid:329e67c6-ec48-4c70-9319-8f0483c69cb2,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:27.884225 kubelet[2060]: I1002 19:36:27.683873 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-bpf-maps\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884225 kubelet[2060]: I1002 19:36:27.683905 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/329e67c6-ec48-4c70-9319-8f0483c69cb2-hubble-tls\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884225 kubelet[2060]: I1002 19:36:27.683924 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-host-proc-sys-net\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884225 kubelet[2060]: I1002 19:36:27.683982 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-run\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884225 kubelet[2060]: I1002 19:36:27.684076 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cni-path\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884225 kubelet[2060]: I1002 19:36:27.684123 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-etc-cni-netd\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884752 kubelet[2060]: I1002 19:36:27.684132 2060 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:36:27.884752 kubelet[2060]: I1002 19:36:27.684157 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/329e67c6-ec48-4c70-9319-8f0483c69cb2-clustermesh-secrets\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884752 kubelet[2060]: I1002 19:36:27.684203 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-hostproc\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884752 kubelet[2060]: I1002 19:36:27.684238 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-cgroup\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884752 kubelet[2060]: I1002 19:36:27.684267 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-xtables-lock\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884752 kubelet[2060]: I1002 19:36:27.684297 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l4q5f\" (UniqueName: \"kubernetes.io/projected/329e67c6-ec48-4c70-9319-8f0483c69cb2-kube-api-access-l4q5f\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884981 kubelet[2060]: I1002 19:36:27.684341 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-config-path\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884981 kubelet[2060]: I1002 19:36:27.684370 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-ipsec-secrets\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884981 kubelet[2060]: I1002 19:36:27.684391 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-host-proc-sys-kernel\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884981 kubelet[2060]: I1002 19:36:27.684411 2060 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-lib-modules\") pod \"cilium-rr4m5\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " pod="kube-system/cilium-rr4m5" Oct 2 19:36:27.884981 kubelet[2060]: E1002 19:36:27.859767 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:28.159410 kubelet[2060]: E1002 19:36:28.159231 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:28.481184 env[1094]: time="2023-10-02T19:36:28.481056460Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:28.483217 env[1094]: time="2023-10-02T19:36:28.483152367Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:28.484790 env[1094]: time="2023-10-02T19:36:28.484762089Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:28.486430 env[1094]: time="2023-10-02T19:36:28.486386770Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:28.500770 env[1094]: time="2023-10-02T19:36:28.500697884Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:28.500770 env[1094]: time="2023-10-02T19:36:28.500733622Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:28.500770 env[1094]: time="2023-10-02T19:36:28.500744593Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:28.501170 env[1094]: time="2023-10-02T19:36:28.501106681Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14 pid=3118 runtime=io.containerd.runc.v2 Oct 2 19:36:28.513053 systemd[1]: Started cri-containerd-4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14.scope. Oct 2 19:36:28.525431 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:36:28.525583 kernel: audit: type=1400 audit(1696275388.521:1361): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525648 kernel: audit: type=1400 audit(1696275388.521:1362): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.528638 kernel: audit: type=1400 audit(1696275388.521:1363): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.529074 kernel: audit: type=1400 audit(1696275388.521:1364): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.530952 kernel: audit: type=1400 audit(1696275388.521:1365): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.534756 kernel: audit: type=1400 audit(1696275388.521:1366): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.534802 kernel: audit: type=1400 audit(1696275388.521:1367): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.536659 kernel: audit: type=1400 audit(1696275388.521:1368): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.538532 kernel: audit: type=1400 audit(1696275388.521:1369): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.542259 kernel: audit: type=1400 audit(1696275388.523:1370): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.523000 audit: BPF prog-id=131 op=LOAD Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3118 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:28.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303961386165623932633436323665376234343433646438616636 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3118 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:28.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303961386165623932633436323665376234343433646438616636 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.524000 audit: BPF prog-id=132 op=LOAD Oct 2 19:36:28.524000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000288db0 items=0 ppid=3118 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:28.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303961386165623932633436323665376234343433646438616636 Oct 2 19:36:28.525000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.525000 audit: BPF prog-id=133 op=LOAD Oct 2 19:36:28.525000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000288df8 items=0 ppid=3118 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:28.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303961386165623932633436323665376234343433646438616636 Oct 2 19:36:28.527000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:36:28.527000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.527000 audit: BPF prog-id=134 op=LOAD Oct 2 19:36:28.527000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000289208 items=0 ppid=3118 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:28.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303961386165623932633436323665376234343433646438616636 Oct 2 19:36:28.591755 env[1094]: time="2023-10-02T19:36:28.591697632Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rr4m5,Uid:329e67c6-ec48-4c70-9319-8f0483c69cb2,Namespace:kube-system,Attempt:0,} returns sandbox id \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\"" Oct 2 19:36:28.592472 kubelet[2060]: E1002 19:36:28.592448 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:28.593324 env[1094]: time="2023-10-02T19:36:28.593255145Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:36:29.203561 kubelet[2060]: E1002 19:36:29.203505 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:29.602000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:29.602000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d05c40 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:36:29.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:29.602000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:29.602000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001060540 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:36:29.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:29.602000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:29.602000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015818c0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:36:29.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:29.603000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:29.603000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009bc060 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:36:29.603000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:32.436531 env[1094]: time="2023-10-02T19:36:32.436408689Z" level=error msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" failed" error="failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T193632Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=c8df53db0a8b47f87408458ea4c6c6b8c167a7340ee01d17357109ece5c026c7&cf_sign=yeiJHRdMh1cM0ijibwHMiM34TXEJsS3jWVST5EqGFEPMyfc4K%2F1bGVovv5LQRyiGM0Ca0sv4DXnVIO6dhaWoQioFMp028WgylWF%2FeLYzZ8MqFVpBFUoVIYEuccAimjmcsJiaGgw4vjWTP9CBQHNHWTHDETlkmUGOvZ0VDXCNV76M4tsv9lPqYSnhK1xFmyZ18IHawt9JbB6ZQ6QAnNoi9ISXr9HHCqJqcblJ7BalORvYyOKTtTrGzYNjuZeFEd3ZQfgDNMLpcsnBur0TpRJ7MPOVU8zsClEigMhyxXPFPPuRxECYhZJRkoTG2Nyvgkdmu%2FEZhuWyEiwLUwjBOnIbpQ%3D%3D&cf_expiry=1696275992®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" Oct 2 19:36:32.437053 kubelet[2060]: E1002 19:36:32.436808 2060 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T193632Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=c8df53db0a8b47f87408458ea4c6c6b8c167a7340ee01d17357109ece5c026c7&cf_sign=yeiJHRdMh1cM0ijibwHMiM34TXEJsS3jWVST5EqGFEPMyfc4K%2F1bGVovv5LQRyiGM0Ca0sv4DXnVIO6dhaWoQioFMp028WgylWF%2FeLYzZ8MqFVpBFUoVIYEuccAimjmcsJiaGgw4vjWTP9CBQHNHWTHDETlkmUGOvZ0VDXCNV76M4tsv9lPqYSnhK1xFmyZ18IHawt9JbB6ZQ6QAnNoi9ISXr9HHCqJqcblJ7BalORvYyOKTtTrGzYNjuZeFEd3ZQfgDNMLpcsnBur0TpRJ7MPOVU8zsClEigMhyxXPFPPuRxECYhZJRkoTG2Nyvgkdmu%2FEZhuWyEiwLUwjBOnIbpQ%3D%3D&cf_expiry=1696275992®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5" Oct 2 19:36:32.437323 kubelet[2060]: E1002 19:36:32.436869 2060 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T193632Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=c8df53db0a8b47f87408458ea4c6c6b8c167a7340ee01d17357109ece5c026c7&cf_sign=yeiJHRdMh1cM0ijibwHMiM34TXEJsS3jWVST5EqGFEPMyfc4K%2F1bGVovv5LQRyiGM0Ca0sv4DXnVIO6dhaWoQioFMp028WgylWF%2FeLYzZ8MqFVpBFUoVIYEuccAimjmcsJiaGgw4vjWTP9CBQHNHWTHDETlkmUGOvZ0VDXCNV76M4tsv9lPqYSnhK1xFmyZ18IHawt9JbB6ZQ6QAnNoi9ISXr9HHCqJqcblJ7BalORvYyOKTtTrGzYNjuZeFEd3ZQfgDNMLpcsnBur0TpRJ7MPOVU8zsClEigMhyxXPFPPuRxECYhZJRkoTG2Nyvgkdmu%2FEZhuWyEiwLUwjBOnIbpQ%3D%3D&cf_expiry=1696275992®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5" Oct 2 19:36:32.437323 kubelet[2060]: E1002 19:36:32.436992 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:32.437323 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:32.437323 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:36:32.437503 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l4q5f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rr4m5_kube-system(329e67c6-ec48-4c70-9319-8f0483c69cb2): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5": failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T193632Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=c8df53db0a8b47f87408458ea4c6c6b8c167a7340ee01d17357109ece5c026c7&cf_sign=yeiJHRdMh1cM0ijibwHMiM34TXEJsS3jWVST5EqGFEPMyfc4K%2F1bGVovv5LQRyiGM0Ca0sv4DXnVIO6dhaWoQioFMp028WgylWF%2FeLYzZ8MqFVpBFUoVIYEuccAimjmcsJiaGgw4vjWTP9CBQHNHWTHDETlkmUGOvZ0VDXCNV76M4tsv9lPqYSnhK1xFmyZ18IHawt9JbB6ZQ6QAnNoi9ISXr9HHCqJqcblJ7BalORvYyOKTtTrGzYNjuZeFEd3ZQfgDNMLpcsnBur0TpRJ7MPOVU8zsClEigMhyxXPFPPuRxECYhZJRkoTG2Nyvgkdmu%2FEZhuWyEiwLUwjBOnIbpQ%3D%3D&cf_expiry=1696275992®ion=us-east-1": dial tcp: lookup cdn03.quay.io: no such host Oct 2 19:36:32.437503 kubelet[2060]: E1002 19:36:32.437075 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://cdn03.quay.io/sha256/3e/3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T193632Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=c8df53db0a8b47f87408458ea4c6c6b8c167a7340ee01d17357109ece5c026c7&cf_sign=yeiJHRdMh1cM0ijibwHMiM34TXEJsS3jWVST5EqGFEPMyfc4K%2F1bGVovv5LQRyiGM0Ca0sv4DXnVIO6dhaWoQioFMp028WgylWF%2FeLYzZ8MqFVpBFUoVIYEuccAimjmcsJiaGgw4vjWTP9CBQHNHWTHDETlkmUGOvZ0VDXCNV76M4tsv9lPqYSnhK1xFmyZ18IHawt9JbB6ZQ6QAnNoi9ISXr9HHCqJqcblJ7BalORvYyOKTtTrGzYNjuZeFEd3ZQfgDNMLpcsnBur0TpRJ7MPOVU8zsClEigMhyxXPFPPuRxECYhZJRkoTG2Nyvgkdmu%2FEZhuWyEiwLUwjBOnIbpQ%3D%3D&cf_expiry=1696275992®ion=us-east-1\\\": dial tcp: lookup cdn03.quay.io: no such host\"" pod="kube-system/cilium-rr4m5" podUID=329e67c6-ec48-4c70-9319-8f0483c69cb2 Oct 2 19:36:32.688966 kubelet[2060]: E1002 19:36:32.688870 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:32.689688 kubelet[2060]: E1002 19:36:32.689472 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\\\"\"" pod="kube-system/cilium-rr4m5" podUID=329e67c6-ec48-4c70-9319-8f0483c69cb2 Oct 2 19:36:34.204925 kubelet[2060]: E1002 19:36:34.204900 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:39.206277 kubelet[2060]: E1002 19:36:39.206245 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:44.207470 kubelet[2060]: E1002 19:36:44.207420 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:47.158965 kubelet[2060]: E1002 19:36:47.158931 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:47.160565 env[1094]: time="2023-10-02T19:36:47.160364601Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:36:49.208738 kubelet[2060]: E1002 19:36:49.208705 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:50.159070 kubelet[2060]: E1002 19:36:50.159029 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:52.046185 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3132930328.mount: Deactivated successfully. Oct 2 19:36:54.209941 kubelet[2060]: E1002 19:36:54.209900 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:56.519480 env[1094]: time="2023-10-02T19:36:56.518220115Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:56.556882 env[1094]: time="2023-10-02T19:36:56.556220686Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:56.570081 env[1094]: time="2023-10-02T19:36:56.566582395Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:56.570081 env[1094]: time="2023-10-02T19:36:56.566965123Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:36:56.585781 env[1094]: time="2023-10-02T19:36:56.585708070Z" level=info msg="CreateContainer within sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:36:56.807290 env[1094]: time="2023-10-02T19:36:56.806911696Z" level=info msg="CreateContainer within sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\"" Oct 2 19:36:56.807928 env[1094]: time="2023-10-02T19:36:56.807887621Z" level=info msg="StartContainer for \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\"" Oct 2 19:36:56.874371 systemd[1]: run-containerd-runc-k8s.io-0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089-runc.m1atNc.mount: Deactivated successfully. Oct 2 19:36:56.881092 systemd[1]: Started cri-containerd-0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089.scope. Oct 2 19:36:56.917297 systemd[1]: cri-containerd-0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089.scope: Deactivated successfully. Oct 2 19:36:57.431159 env[1094]: time="2023-10-02T19:36:57.431082945Z" level=info msg="shim disconnected" id=0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089 Oct 2 19:36:57.431544 env[1094]: time="2023-10-02T19:36:57.431516659Z" level=warning msg="cleaning up after shim disconnected" id=0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089 namespace=k8s.io Oct 2 19:36:57.431659 env[1094]: time="2023-10-02T19:36:57.431637219Z" level=info msg="cleaning up dead shim" Oct 2 19:36:57.448253 env[1094]: time="2023-10-02T19:36:57.448123976Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3179 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:36:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:36:57.448588 env[1094]: time="2023-10-02T19:36:57.448510080Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:36:57.454772 env[1094]: time="2023-10-02T19:36:57.454696566Z" level=error msg="Failed to pipe stderr of container \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\"" error="reading from a closed fifo" Oct 2 19:36:57.456680 env[1094]: time="2023-10-02T19:36:57.456528918Z" level=error msg="Failed to pipe stdout of container \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\"" error="reading from a closed fifo" Oct 2 19:36:57.497084 env[1094]: time="2023-10-02T19:36:57.496947261Z" level=error msg="StartContainer for \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:36:57.500699 kubelet[2060]: E1002 19:36:57.498207 2060 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089" Oct 2 19:36:57.500699 kubelet[2060]: E1002 19:36:57.498352 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:57.500699 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:57.500699 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:36:57.500699 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l4q5f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rr4m5_kube-system(329e67c6-ec48-4c70-9319-8f0483c69cb2): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:36:57.500699 kubelet[2060]: E1002 19:36:57.498399 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rr4m5" podUID=329e67c6-ec48-4c70-9319-8f0483c69cb2 Oct 2 19:36:57.681490 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089-rootfs.mount: Deactivated successfully. Oct 2 19:36:57.765623 kubelet[2060]: E1002 19:36:57.764824 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:57.783626 env[1094]: time="2023-10-02T19:36:57.783535179Z" level=info msg="CreateContainer within sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:36:58.065239 env[1094]: time="2023-10-02T19:36:58.062641809Z" level=info msg="CreateContainer within sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\"" Oct 2 19:36:58.065239 env[1094]: time="2023-10-02T19:36:58.065172146Z" level=info msg="StartContainer for \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\"" Oct 2 19:36:58.112482 systemd[1]: run-containerd-runc-k8s.io-a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43-runc.56hELw.mount: Deactivated successfully. Oct 2 19:36:58.119520 systemd[1]: Started cri-containerd-a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43.scope. Oct 2 19:36:58.166326 systemd[1]: cri-containerd-a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43.scope: Deactivated successfully. Oct 2 19:36:58.582035 env[1094]: time="2023-10-02T19:36:58.581962029Z" level=info msg="shim disconnected" id=a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43 Oct 2 19:36:58.582365 env[1094]: time="2023-10-02T19:36:58.582341890Z" level=warning msg="cleaning up after shim disconnected" id=a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43 namespace=k8s.io Oct 2 19:36:58.582476 env[1094]: time="2023-10-02T19:36:58.582455656Z" level=info msg="cleaning up dead shim" Oct 2 19:36:58.626660 env[1094]: time="2023-10-02T19:36:58.625479669Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3214 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:36:58Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:36:58.626660 env[1094]: time="2023-10-02T19:36:58.625845614Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:36:58.632111 env[1094]: time="2023-10-02T19:36:58.629157787Z" level=error msg="Failed to pipe stdout of container \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\"" error="reading from a closed fifo" Oct 2 19:36:58.632111 env[1094]: time="2023-10-02T19:36:58.629241958Z" level=error msg="Failed to pipe stderr of container \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\"" error="reading from a closed fifo" Oct 2 19:36:58.681329 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43-rootfs.mount: Deactivated successfully. Oct 2 19:36:58.722797 env[1094]: time="2023-10-02T19:36:58.720474204Z" level=error msg="StartContainer for \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:36:58.723013 kubelet[2060]: E1002 19:36:58.720868 2060 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43" Oct 2 19:36:58.723013 kubelet[2060]: E1002 19:36:58.721006 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:58.723013 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:58.723013 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:36:58.723013 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l4q5f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rr4m5_kube-system(329e67c6-ec48-4c70-9319-8f0483c69cb2): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:36:58.723013 kubelet[2060]: E1002 19:36:58.721051 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rr4m5" podUID=329e67c6-ec48-4c70-9319-8f0483c69cb2 Oct 2 19:36:58.790755 kubelet[2060]: I1002 19:36:58.788664 2060 scope.go:115] "RemoveContainer" containerID="0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089" Oct 2 19:36:58.790755 kubelet[2060]: I1002 19:36:58.789122 2060 scope.go:115] "RemoveContainer" containerID="0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089" Oct 2 19:36:58.794050 env[1094]: time="2023-10-02T19:36:58.794006968Z" level=info msg="RemoveContainer for \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\"" Oct 2 19:36:58.795063 env[1094]: time="2023-10-02T19:36:58.795031915Z" level=info msg="RemoveContainer for \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\"" Oct 2 19:36:58.795246 env[1094]: time="2023-10-02T19:36:58.795197028Z" level=error msg="RemoveContainer for \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\" failed" error="failed to set removing state for container \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\": container is already in removing state" Oct 2 19:36:58.796316 kubelet[2060]: E1002 19:36:58.795659 2060 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\": container is already in removing state" containerID="0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089" Oct 2 19:36:58.796316 kubelet[2060]: E1002 19:36:58.795703 2060 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089": container is already in removing state; Skipping pod "cilium-rr4m5_kube-system(329e67c6-ec48-4c70-9319-8f0483c69cb2)" Oct 2 19:36:58.796316 kubelet[2060]: E1002 19:36:58.795771 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:36:58.796316 kubelet[2060]: E1002 19:36:58.796068 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rr4m5_kube-system(329e67c6-ec48-4c70-9319-8f0483c69cb2)\"" pod="kube-system/cilium-rr4m5" podUID=329e67c6-ec48-4c70-9319-8f0483c69cb2 Oct 2 19:36:58.952489 env[1094]: time="2023-10-02T19:36:58.950936338Z" level=info msg="RemoveContainer for \"0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089\" returns successfully" Oct 2 19:36:59.212737 kubelet[2060]: E1002 19:36:59.211811 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:00.551969 kubelet[2060]: W1002 19:37:00.551886 2060 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod329e67c6_ec48_4c70_9319_8f0483c69cb2.slice/cri-containerd-0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089.scope WatchSource:0}: container "0976e4ff9e55fcf8c14f07b20b52e1b9cbfd20787212d4de8d4bde002587f089" in namespace "k8s.io": not found Oct 2 19:37:03.673060 kubelet[2060]: W1002 19:37:03.669987 2060 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod329e67c6_ec48_4c70_9319_8f0483c69cb2.slice/cri-containerd-a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43.scope WatchSource:0}: task a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43 not found: not found Oct 2 19:37:04.212865 kubelet[2060]: E1002 19:37:04.212828 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:09.163396 kubelet[2060]: E1002 19:37:09.163356 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:37:09.215017 kubelet[2060]: E1002 19:37:09.214970 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:10.162521 kubelet[2060]: E1002 19:37:10.161564 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:37:10.164827 env[1094]: time="2023-10-02T19:37:10.164751717Z" level=info msg="CreateContainer within sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:37:10.248850 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount392294014.mount: Deactivated successfully. Oct 2 19:37:10.326036 env[1094]: time="2023-10-02T19:37:10.325830004Z" level=info msg="CreateContainer within sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774\"" Oct 2 19:37:10.329233 env[1094]: time="2023-10-02T19:37:10.327051213Z" level=info msg="StartContainer for \"0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774\"" Oct 2 19:37:10.361639 systemd[1]: Started cri-containerd-0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774.scope. Oct 2 19:37:10.375915 systemd[1]: cri-containerd-0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774.scope: Deactivated successfully. Oct 2 19:37:10.497127 env[1094]: time="2023-10-02T19:37:10.494363360Z" level=info msg="shim disconnected" id=0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774 Oct 2 19:37:10.497127 env[1094]: time="2023-10-02T19:37:10.494429306Z" level=warning msg="cleaning up after shim disconnected" id=0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774 namespace=k8s.io Oct 2 19:37:10.497127 env[1094]: time="2023-10-02T19:37:10.494448772Z" level=info msg="cleaning up dead shim" Oct 2 19:37:10.522010 env[1094]: time="2023-10-02T19:37:10.518079741Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3251 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:37:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:37:10.522010 env[1094]: time="2023-10-02T19:37:10.518464742Z" level=error msg="copy shim log" error="read /proc/self/fd/34: file already closed" Oct 2 19:37:10.522010 env[1094]: time="2023-10-02T19:37:10.519145275Z" level=error msg="Failed to pipe stderr of container \"0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774\"" error="reading from a closed fifo" Oct 2 19:37:10.522010 env[1094]: time="2023-10-02T19:37:10.519015067Z" level=error msg="Failed to pipe stdout of container \"0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774\"" error="reading from a closed fifo" Oct 2 19:37:10.572049 env[1094]: time="2023-10-02T19:37:10.568169639Z" level=error msg="StartContainer for \"0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:37:10.572253 kubelet[2060]: E1002 19:37:10.568498 2060 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774" Oct 2 19:37:10.572253 kubelet[2060]: E1002 19:37:10.568637 2060 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:37:10.572253 kubelet[2060]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:37:10.572253 kubelet[2060]: rm /hostbin/cilium-mount Oct 2 19:37:10.572253 kubelet[2060]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l4q5f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rr4m5_kube-system(329e67c6-ec48-4c70-9319-8f0483c69cb2): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:37:10.572253 kubelet[2060]: E1002 19:37:10.568682 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rr4m5" podUID=329e67c6-ec48-4c70-9319-8f0483c69cb2 Oct 2 19:37:10.897082 kubelet[2060]: I1002 19:37:10.896399 2060 scope.go:115] "RemoveContainer" containerID="a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43" Oct 2 19:37:10.897082 kubelet[2060]: I1002 19:37:10.896865 2060 scope.go:115] "RemoveContainer" containerID="a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43" Oct 2 19:37:10.906006 env[1094]: time="2023-10-02T19:37:10.902515165Z" level=info msg="RemoveContainer for \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\"" Oct 2 19:37:10.911009 env[1094]: time="2023-10-02T19:37:10.908362513Z" level=info msg="RemoveContainer for \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\"" Oct 2 19:37:10.911009 env[1094]: time="2023-10-02T19:37:10.908512367Z" level=error msg="RemoveContainer for \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\" failed" error="failed to set removing state for container \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\": container is already in removing state" Oct 2 19:37:10.912282 kubelet[2060]: E1002 19:37:10.911453 2060 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\": container is already in removing state" containerID="a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43" Oct 2 19:37:10.912282 kubelet[2060]: E1002 19:37:10.911505 2060 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43": container is already in removing state; Skipping pod "cilium-rr4m5_kube-system(329e67c6-ec48-4c70-9319-8f0483c69cb2)" Oct 2 19:37:10.912282 kubelet[2060]: E1002 19:37:10.911618 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:37:10.912282 kubelet[2060]: E1002 19:37:10.911897 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rr4m5_kube-system(329e67c6-ec48-4c70-9319-8f0483c69cb2)\"" pod="kube-system/cilium-rr4m5" podUID=329e67c6-ec48-4c70-9319-8f0483c69cb2 Oct 2 19:37:10.932011 env[1094]: time="2023-10-02T19:37:10.929241092Z" level=info msg="RemoveContainer for \"a3996655ea75f4bb4f47c017609565aaead30aec116b51d0137397bd9454ea43\" returns successfully" Oct 2 19:37:11.245984 systemd[1]: run-containerd-runc-k8s.io-0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774-runc.TOupbM.mount: Deactivated successfully. Oct 2 19:37:11.246103 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774-rootfs.mount: Deactivated successfully. Oct 2 19:37:13.623330 kubelet[2060]: W1002 19:37:13.622146 2060 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod329e67c6_ec48_4c70_9319_8f0483c69cb2.slice/cri-containerd-0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774.scope WatchSource:0}: task 0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774 not found: not found Oct 2 19:37:14.227163 kubelet[2060]: E1002 19:37:14.226335 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:19.231640 kubelet[2060]: E1002 19:37:19.231333 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:22.159701 kubelet[2060]: E1002 19:37:22.159545 2060 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:37:22.160209 kubelet[2060]: E1002 19:37:22.159829 2060 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rr4m5_kube-system(329e67c6-ec48-4c70-9319-8f0483c69cb2)\"" pod="kube-system/cilium-rr4m5" podUID=329e67c6-ec48-4c70-9319-8f0483c69cb2 Oct 2 19:37:24.246956 kubelet[2060]: E1002 19:37:24.245742 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:24.378000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.385916 kernel: kauditd_printk_skb: 59 callbacks suppressed Oct 2 19:37:24.386105 kernel: audit: type=1400 audit(1696275444.378:1383): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.386144 kernel: audit: type=1300 audit(1696275444.378:1383): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002548440 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:24.378000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002548440 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:24.389463 kernel: audit: type=1327 audit(1696275444.378:1383): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:24.378000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:24.393122 kernel: audit: type=1400 audit(1696275444.379:1384): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.379000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.398267 kernel: audit: type=1300 audit(1696275444.379:1384): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238f8c0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:24.379000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238f8c0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:24.400029 kernel: audit: type=1327 audit(1696275444.379:1384): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:24.379000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:25.054000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:25.054000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:25.074957 kernel: audit: type=1400 audit(1696275445.054:1385): avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:25.075146 kernel: audit: type=1400 audit(1696275445.054:1386): avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:25.075181 kernel: audit: type=1300 audit(1696275445.054:1385): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f6d5a0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:37:25.054000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f6d5a0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:37:25.054000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:37:25.054000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=59 a1=c00f137440 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:37:25.054000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:37:25.055000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7069 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:25.055000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00e72f050 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:37:25.055000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:37:25.058000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7073 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:25.058000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00e72f080 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:37:25.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:37:25.058000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7075 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:25.058000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00e72f0e0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:37:25.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:37:25.058000 audit[1950]: AVC avc: denied { watch } for pid=1950 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:25.058000 audit[1950]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f6d5c0 a2=fc6 a3=0 items=0 ppid=1824 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c524 key=(null) Oct 2 19:37:25.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:37:25.106247 kernel: audit: type=1327 audit(1696275445.054:1385): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:37:28.027929 env[1094]: time="2023-10-02T19:37:28.027519357Z" level=info msg="StopPodSandbox for \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\"" Oct 2 19:37:28.027929 env[1094]: time="2023-10-02T19:37:28.027645477Z" level=info msg="Container to stop \"0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:37:28.029811 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14-shm.mount: Deactivated successfully. Oct 2 19:37:28.057744 systemd[1]: cri-containerd-4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14.scope: Deactivated successfully. Oct 2 19:37:28.057000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:37:28.065000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:37:28.129200 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14-rootfs.mount: Deactivated successfully. Oct 2 19:37:28.280044 env[1094]: time="2023-10-02T19:37:28.279279346Z" level=info msg="shim disconnected" id=4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14 Oct 2 19:37:28.280044 env[1094]: time="2023-10-02T19:37:28.279333830Z" level=warning msg="cleaning up after shim disconnected" id=4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14 namespace=k8s.io Oct 2 19:37:28.280044 env[1094]: time="2023-10-02T19:37:28.279346574Z" level=info msg="cleaning up dead shim" Oct 2 19:37:28.306632 env[1094]: time="2023-10-02T19:37:28.305582742Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3281 runtime=io.containerd.runc.v2\n" Oct 2 19:37:28.306632 env[1094]: time="2023-10-02T19:37:28.306046242Z" level=info msg="TearDown network for sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" successfully" Oct 2 19:37:28.306632 env[1094]: time="2023-10-02T19:37:28.306078664Z" level=info msg="StopPodSandbox for \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" returns successfully" Oct 2 19:37:28.419189 sshd[3097]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427065 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-etc-cni-netd\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427119 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-xtables-lock\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427145 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-lib-modules\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427171 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-bpf-maps\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427205 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/329e67c6-ec48-4c70-9319-8f0483c69cb2-hubble-tls\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427229 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cni-path\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427226 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427252 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-hostproc\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427283 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-hostproc" (OuterVolumeSpecName: "hostproc") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427320 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427338 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/329e67c6-ec48-4c70-9319-8f0483c69cb2-clustermesh-secrets\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427380 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-ipsec-secrets\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427413 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-host-proc-sys-kernel\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427445 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-run\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427472 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-host-proc-sys-net\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427542 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-cgroup\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427576 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-l4q5f\" (UniqueName: \"kubernetes.io/projected/329e67c6-ec48-4c70-9319-8f0483c69cb2-kube-api-access-l4q5f\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427625 2060 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-config-path\") pod \"329e67c6-ec48-4c70-9319-8f0483c69cb2\" (UID: \"329e67c6-ec48-4c70-9319-8f0483c69cb2\") " Oct 2 19:37:28.428640 kubelet[2060]: I1002 19:37:28.427680 2060 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.429694 kubelet[2060]: I1002 19:37:28.427696 2060 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.429694 kubelet[2060]: I1002 19:37:28.427714 2060 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.429694 kubelet[2060]: I1002 19:37:28.427753 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cni-path" (OuterVolumeSpecName: "cni-path") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.429694 kubelet[2060]: I1002 19:37:28.427811 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.429694 kubelet[2060]: W1002 19:37:28.427941 2060 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/329e67c6-ec48-4c70-9319-8f0483c69cb2/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:37:28.429694 kubelet[2060]: I1002 19:37:28.427341 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.429694 kubelet[2060]: I1002 19:37:28.428244 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.429694 kubelet[2060]: I1002 19:37:28.428282 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.429694 kubelet[2060]: I1002 19:37:28.428310 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.431663 kubelet[2060]: I1002 19:37:28.430628 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:37:28.431663 kubelet[2060]: I1002 19:37:28.430746 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:28.432386 kubelet[2060]: I1002 19:37:28.432349 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/329e67c6-ec48-4c70-9319-8f0483c69cb2-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:37:28.433142 systemd[1]: var-lib-kubelet-pods-329e67c6\x2dec48\x2d4c70\x2d9319\x2d8f0483c69cb2-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:37:28.435968 kubelet[2060]: I1002 19:37:28.434509 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:37:28.435968 kubelet[2060]: I1002 19:37:28.435708 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/329e67c6-ec48-4c70-9319-8f0483c69cb2-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:37:28.433279 systemd[1]: var-lib-kubelet-pods-329e67c6\x2dec48\x2d4c70\x2d9319\x2d8f0483c69cb2-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:37:28.434000 audit[3097]: USER_END pid=3097 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:37:28.434000 audit[3097]: CRED_DISP pid=3097 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:37:28.436831 systemd[1]: var-lib-kubelet-pods-329e67c6\x2dec48\x2d4c70\x2d9319\x2d8f0483c69cb2-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:37:28.440944 kubelet[2060]: I1002 19:37:28.438899 2060 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/329e67c6-ec48-4c70-9319-8f0483c69cb2-kube-api-access-l4q5f" (OuterVolumeSpecName: "kube-api-access-l4q5f") pod "329e67c6-ec48-4c70-9319-8f0483c69cb2" (UID: "329e67c6-ec48-4c70-9319-8f0483c69cb2"). InnerVolumeSpecName "kube-api-access-l4q5f". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:37:28.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.13:22-10.0.0.1:46984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:28.443384 systemd[1]: var-lib-kubelet-pods-329e67c6\x2dec48\x2d4c70\x2d9319\x2d8f0483c69cb2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dl4q5f.mount: Deactivated successfully. Oct 2 19:37:28.444222 systemd[1]: sshd@29-10.0.0.13:22-10.0.0.1:46984.service: Deactivated successfully. Oct 2 19:37:28.445049 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:37:28.457478 systemd-logind[1077]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:37:28.474222 systemd-logind[1077]: Removed session 30. Oct 2 19:37:28.528142 kubelet[2060]: I1002 19:37:28.528043 2060 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528142 kubelet[2060]: I1002 19:37:28.528106 2060 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528142 kubelet[2060]: I1002 19:37:28.528125 2060 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528142 kubelet[2060]: I1002 19:37:28.528143 2060 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-l4q5f\" (UniqueName: \"kubernetes.io/projected/329e67c6-ec48-4c70-9319-8f0483c69cb2-kube-api-access-l4q5f\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528142 kubelet[2060]: I1002 19:37:28.528160 2060 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528510 kubelet[2060]: I1002 19:37:28.528176 2060 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528510 kubelet[2060]: I1002 19:37:28.528191 2060 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528510 kubelet[2060]: I1002 19:37:28.528206 2060 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/329e67c6-ec48-4c70-9319-8f0483c69cb2-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528510 kubelet[2060]: I1002 19:37:28.528219 2060 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528510 kubelet[2060]: I1002 19:37:28.528233 2060 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/329e67c6-ec48-4c70-9319-8f0483c69cb2-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528510 kubelet[2060]: I1002 19:37:28.528247 2060 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/329e67c6-ec48-4c70-9319-8f0483c69cb2-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:28.528510 kubelet[2060]: I1002 19:37:28.528262 2060 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/329e67c6-ec48-4c70-9319-8f0483c69cb2-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:37:29.003693 kubelet[2060]: I1002 19:37:29.002225 2060 scope.go:115] "RemoveContainer" containerID="0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774" Oct 2 19:37:29.012860 env[1094]: time="2023-10-02T19:37:29.012803113Z" level=info msg="RemoveContainer for \"0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774\"" Oct 2 19:37:29.022387 systemd[1]: Removed slice kubepods-burstable-pod329e67c6_ec48_4c70_9319_8f0483c69cb2.slice. Oct 2 19:37:29.047721 env[1094]: time="2023-10-02T19:37:29.047570268Z" level=info msg="RemoveContainer for \"0e3a918a84f9d2ba67e4fcc0833409ff3d66e5073fda25630a9c458fb77d9774\" returns successfully" Oct 2 19:37:29.118965 env[1094]: time="2023-10-02T19:37:29.118680241Z" level=info msg="StopPodSandbox for \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\"" Oct 2 19:37:29.118965 env[1094]: time="2023-10-02T19:37:29.118808304Z" level=info msg="TearDown network for sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" successfully" Oct 2 19:37:29.118965 env[1094]: time="2023-10-02T19:37:29.118854362Z" level=info msg="StopPodSandbox for \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" returns successfully" Oct 2 19:37:29.122934 env[1094]: time="2023-10-02T19:37:29.119405438Z" level=info msg="RemovePodSandbox for \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\"" Oct 2 19:37:29.122934 env[1094]: time="2023-10-02T19:37:29.119441507Z" level=info msg="Forcibly stopping sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\"" Oct 2 19:37:29.122934 env[1094]: time="2023-10-02T19:37:29.119513413Z" level=info msg="TearDown network for sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" successfully" Oct 2 19:37:29.162118 env[1094]: time="2023-10-02T19:37:29.161422871Z" level=info msg="StopPodSandbox for \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\"" Oct 2 19:37:29.162118 env[1094]: time="2023-10-02T19:37:29.161540033Z" level=info msg="TearDown network for sandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" successfully" Oct 2 19:37:29.162118 env[1094]: time="2023-10-02T19:37:29.161582083Z" level=info msg="StopPodSandbox for \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" returns successfully" Oct 2 19:37:29.166972 kubelet[2060]: I1002 19:37:29.163563 2060 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=329e67c6-ec48-4c70-9319-8f0483c69cb2 path="/var/lib/kubelet/pods/329e67c6-ec48-4c70-9319-8f0483c69cb2/volumes" Oct 2 19:37:29.176247 env[1094]: time="2023-10-02T19:37:29.176074341Z" level=info msg="RemovePodSandbox \"4009a8aeb92c4626e7b4443dd8af69be87bc24afe1f5133ae4fa98975ac1de14\" returns successfully" Oct 2 19:37:29.259134 kubelet[2060]: E1002 19:37:29.255084 2060 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:29.604000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.618451 kernel: kauditd_printk_skb: 19 callbacks suppressed Oct 2 19:37:29.618654 kernel: audit: type=1400 audit(1696275449.604:1396): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.618711 kernel: audit: type=1300 audit(1696275449.604:1396): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025494e0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:29.618747 kernel: audit: type=1327 audit(1696275449.604:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:29.604000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025494e0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:29.604000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:29.604000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.604000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e251a0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:29.629987 kernel: audit: type=1400 audit(1696275449.604:1397): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.630129 kernel: audit: type=1300 audit(1696275449.604:1397): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e251a0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:29.630183 kernel: audit: type=1327 audit(1696275449.604:1397): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:29.604000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:29.633927 kernel: audit: type=1400 audit(1696275449.605:1398): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.605000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.637951 kernel: audit: type=1300 audit(1696275449.605:1398): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002549600 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:29.605000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002549600 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:29.641943 kernel: audit: type=1327 audit(1696275449.605:1398): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:29.605000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:29.605000 audit[1943]: AVC avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.646333 kernel: audit: type=1400 audit(1696275449.605:1399): avc: denied { watch } for pid=1943 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7063 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.605000 audit[1943]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e252e0 a2=fc6 a3=0 items=0 ppid=1790 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c368 key=(null) Oct 2 19:37:29.605000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269