Oct 2 18:47:20.203322 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 18:47:20.203363 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 18:47:20.203386 kernel: efi: EFI v2.70 by EDK II Oct 2 18:47:20.203460 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 18:47:20.203481 kernel: ACPI: Early table checksum verification disabled Oct 2 18:47:20.203495 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 18:47:20.203512 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 18:47:20.203526 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 18:47:20.203540 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 18:47:20.203554 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 18:47:20.203574 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 18:47:20.203588 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 18:47:20.203602 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 18:47:20.203616 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 18:47:20.203632 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 18:47:20.203652 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 18:47:20.203667 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 18:47:20.203681 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 18:47:20.203696 kernel: printk: bootconsole [uart0] enabled Oct 2 18:47:20.203710 kernel: NUMA: Failed to initialise from firmware Oct 2 18:47:20.203725 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 18:47:20.203740 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 18:47:20.203755 kernel: Zone ranges: Oct 2 18:47:20.203771 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 18:47:20.203785 kernel: DMA32 empty Oct 2 18:47:20.203800 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 18:47:20.203821 kernel: Movable zone start for each node Oct 2 18:47:20.203836 kernel: Early memory node ranges Oct 2 18:47:20.203851 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 18:47:20.203866 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 18:47:20.203880 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 18:47:20.203895 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 18:47:20.203910 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 18:47:20.203924 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 18:47:20.203939 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 18:47:20.203954 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 18:47:20.203968 kernel: psci: probing for conduit method from ACPI. Oct 2 18:47:20.203983 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 18:47:20.204003 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 18:47:20.204018 kernel: psci: Trusted OS migration not required Oct 2 18:47:20.204039 kernel: psci: SMC Calling Convention v1.1 Oct 2 18:47:20.204055 kernel: ACPI: SRAT not present Oct 2 18:47:20.204072 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 18:47:20.204092 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 18:47:20.204108 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 18:47:20.204123 kernel: Detected PIPT I-cache on CPU0 Oct 2 18:47:20.204139 kernel: CPU features: detected: GIC system register CPU interface Oct 2 18:47:20.204154 kernel: CPU features: detected: Spectre-v2 Oct 2 18:47:20.204170 kernel: CPU features: detected: Spectre-v3a Oct 2 18:47:20.204186 kernel: CPU features: detected: Spectre-BHB Oct 2 18:47:20.204201 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 18:47:20.204217 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 18:47:20.204232 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 18:47:20.204248 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 18:47:20.204268 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 18:47:20.204284 kernel: Policy zone: Normal Oct 2 18:47:20.204303 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:47:20.204319 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 18:47:20.204335 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 18:47:20.204350 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 18:47:20.204365 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 18:47:20.204380 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 18:47:20.204396 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 18:47:20.204447 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 18:47:20.204472 kernel: trace event string verifier disabled Oct 2 18:47:20.204487 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 18:47:20.204503 kernel: rcu: RCU event tracing is enabled. Oct 2 18:47:20.204519 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 18:47:20.204535 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 18:47:20.204550 kernel: Tracing variant of Tasks RCU enabled. Oct 2 18:47:20.204565 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 18:47:20.204581 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 18:47:20.204597 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 18:47:20.204611 kernel: GICv3: 96 SPIs implemented Oct 2 18:47:20.204627 kernel: GICv3: 0 Extended SPIs implemented Oct 2 18:47:20.204642 kernel: GICv3: Distributor has no Range Selector support Oct 2 18:47:20.204663 kernel: Root IRQ handler: gic_handle_irq Oct 2 18:47:20.204678 kernel: GICv3: 16 PPIs implemented Oct 2 18:47:20.204693 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 18:47:20.204708 kernel: ACPI: SRAT not present Oct 2 18:47:20.204722 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 18:47:20.204738 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 18:47:20.204753 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 18:47:20.204769 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 18:47:20.204784 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 18:47:20.204800 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 18:47:20.204815 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 18:47:20.204834 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 18:47:20.204850 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 18:47:20.204866 kernel: Console: colour dummy device 80x25 Oct 2 18:47:20.204882 kernel: printk: console [tty1] enabled Oct 2 18:47:20.204897 kernel: ACPI: Core revision 20210730 Oct 2 18:47:20.204913 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 18:47:20.204928 kernel: pid_max: default: 32768 minimum: 301 Oct 2 18:47:20.204944 kernel: LSM: Security Framework initializing Oct 2 18:47:20.204960 kernel: SELinux: Initializing. Oct 2 18:47:20.204976 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:47:20.204995 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:47:20.205011 kernel: rcu: Hierarchical SRCU implementation. Oct 2 18:47:20.205026 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 18:47:20.205042 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 18:47:20.205057 kernel: Remapping and enabling EFI services. Oct 2 18:47:20.205073 kernel: smp: Bringing up secondary CPUs ... Oct 2 18:47:20.205088 kernel: Detected PIPT I-cache on CPU1 Oct 2 18:47:20.205104 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 18:47:20.205119 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 18:47:20.205139 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 18:47:20.205154 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 18:47:20.205170 kernel: SMP: Total of 2 processors activated. Oct 2 18:47:20.205186 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 18:47:20.205201 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 18:47:20.205216 kernel: CPU features: detected: CRC32 instructions Oct 2 18:47:20.205232 kernel: CPU: All CPU(s) started at EL1 Oct 2 18:47:20.205249 kernel: alternatives: patching kernel code Oct 2 18:47:20.205264 kernel: devtmpfs: initialized Oct 2 18:47:20.205283 kernel: KASLR disabled due to lack of seed Oct 2 18:47:20.205300 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 18:47:20.205316 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 18:47:20.205341 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 18:47:20.205362 kernel: SMBIOS 3.0.0 present. Oct 2 18:47:20.205379 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 18:47:20.205395 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 18:47:20.205440 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 18:47:20.205458 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 18:47:20.205474 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 18:47:20.205491 kernel: audit: initializing netlink subsys (disabled) Oct 2 18:47:20.205508 kernel: audit: type=2000 audit(0.269:1): state=initialized audit_enabled=0 res=1 Oct 2 18:47:20.205531 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 18:47:20.205547 kernel: cpuidle: using governor menu Oct 2 18:47:20.205563 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 18:47:20.205579 kernel: ASID allocator initialised with 32768 entries Oct 2 18:47:20.205599 kernel: ACPI: bus type PCI registered Oct 2 18:47:20.205616 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 18:47:20.205632 kernel: Serial: AMBA PL011 UART driver Oct 2 18:47:20.205648 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 18:47:20.205664 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 18:47:20.205680 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 18:47:20.205697 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 18:47:20.205713 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 18:47:20.205729 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 18:47:20.205745 kernel: ACPI: Added _OSI(Module Device) Oct 2 18:47:20.205766 kernel: ACPI: Added _OSI(Processor Device) Oct 2 18:47:20.205782 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 18:47:20.205798 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 18:47:20.205814 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 18:47:20.205830 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 18:47:20.205846 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 18:47:20.205862 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 18:47:20.205879 kernel: ACPI: Interpreter enabled Oct 2 18:47:20.205895 kernel: ACPI: Using GIC for interrupt routing Oct 2 18:47:20.205915 kernel: ACPI: MCFG table detected, 1 entries Oct 2 18:47:20.205932 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 18:47:20.206357 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 18:47:20.206642 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 18:47:20.206883 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 18:47:20.207111 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 18:47:20.207332 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 18:47:20.207375 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 18:47:20.207392 kernel: acpiphp: Slot [1] registered Oct 2 18:47:20.223563 kernel: acpiphp: Slot [2] registered Oct 2 18:47:20.223593 kernel: acpiphp: Slot [3] registered Oct 2 18:47:20.223611 kernel: acpiphp: Slot [4] registered Oct 2 18:47:20.223628 kernel: acpiphp: Slot [5] registered Oct 2 18:47:20.223645 kernel: acpiphp: Slot [6] registered Oct 2 18:47:20.223663 kernel: acpiphp: Slot [7] registered Oct 2 18:47:20.223679 kernel: acpiphp: Slot [8] registered Oct 2 18:47:20.223707 kernel: acpiphp: Slot [9] registered Oct 2 18:47:20.223724 kernel: acpiphp: Slot [10] registered Oct 2 18:47:20.223740 kernel: acpiphp: Slot [11] registered Oct 2 18:47:20.223757 kernel: acpiphp: Slot [12] registered Oct 2 18:47:20.223774 kernel: acpiphp: Slot [13] registered Oct 2 18:47:20.223790 kernel: acpiphp: Slot [14] registered Oct 2 18:47:20.223807 kernel: acpiphp: Slot [15] registered Oct 2 18:47:20.223823 kernel: acpiphp: Slot [16] registered Oct 2 18:47:20.223840 kernel: acpiphp: Slot [17] registered Oct 2 18:47:20.223856 kernel: acpiphp: Slot [18] registered Oct 2 18:47:20.223880 kernel: acpiphp: Slot [19] registered Oct 2 18:47:20.223896 kernel: acpiphp: Slot [20] registered Oct 2 18:47:20.223912 kernel: acpiphp: Slot [21] registered Oct 2 18:47:20.223929 kernel: acpiphp: Slot [22] registered Oct 2 18:47:20.223946 kernel: acpiphp: Slot [23] registered Oct 2 18:47:20.223962 kernel: acpiphp: Slot [24] registered Oct 2 18:47:20.223978 kernel: acpiphp: Slot [25] registered Oct 2 18:47:20.223995 kernel: acpiphp: Slot [26] registered Oct 2 18:47:20.224011 kernel: acpiphp: Slot [27] registered Oct 2 18:47:20.224032 kernel: acpiphp: Slot [28] registered Oct 2 18:47:20.224049 kernel: acpiphp: Slot [29] registered Oct 2 18:47:20.224066 kernel: acpiphp: Slot [30] registered Oct 2 18:47:20.224082 kernel: acpiphp: Slot [31] registered Oct 2 18:47:20.224098 kernel: PCI host bridge to bus 0000:00 Oct 2 18:47:20.224379 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 18:47:20.224617 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 18:47:20.224804 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 18:47:20.224996 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 18:47:20.225235 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 18:47:20.225499 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 18:47:20.225713 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 18:47:20.225938 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 18:47:20.229138 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 18:47:20.234682 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 18:47:20.234958 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 18:47:20.235190 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 18:47:20.235458 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 18:47:20.235697 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 18:47:20.235899 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 18:47:20.236098 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 18:47:20.236311 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 18:47:20.236550 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 18:47:20.236754 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 18:47:20.236969 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 18:47:20.237163 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 18:47:20.237356 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 18:47:20.237584 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 18:47:20.237623 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 18:47:20.237642 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 18:47:20.237659 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 18:47:20.237676 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 18:47:20.237692 kernel: iommu: Default domain type: Translated Oct 2 18:47:20.237709 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 18:47:20.237725 kernel: vgaarb: loaded Oct 2 18:47:20.237741 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 18:47:20.237759 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 18:47:20.237782 kernel: PTP clock support registered Oct 2 18:47:20.237799 kernel: Registered efivars operations Oct 2 18:47:20.237815 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 18:47:20.237832 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 18:47:20.237849 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 18:47:20.237865 kernel: pnp: PnP ACPI init Oct 2 18:47:20.238147 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 18:47:20.238183 kernel: pnp: PnP ACPI: found 1 devices Oct 2 18:47:20.238200 kernel: NET: Registered PF_INET protocol family Oct 2 18:47:20.238226 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 18:47:20.238243 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 18:47:20.238260 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 18:47:20.238277 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 18:47:20.238294 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 18:47:20.238311 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 18:47:20.238328 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:47:20.238345 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:47:20.238367 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 18:47:20.238385 kernel: PCI: CLS 0 bytes, default 64 Oct 2 18:47:20.238430 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 18:47:20.238452 kernel: kvm [1]: HYP mode not available Oct 2 18:47:20.238470 kernel: Initialise system trusted keyrings Oct 2 18:47:20.238488 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 18:47:20.238504 kernel: Key type asymmetric registered Oct 2 18:47:20.238521 kernel: Asymmetric key parser 'x509' registered Oct 2 18:47:20.238537 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 18:47:20.238559 kernel: io scheduler mq-deadline registered Oct 2 18:47:20.238576 kernel: io scheduler kyber registered Oct 2 18:47:20.238592 kernel: io scheduler bfq registered Oct 2 18:47:20.238855 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 18:47:20.238884 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 18:47:20.238901 kernel: ACPI: button: Power Button [PWRB] Oct 2 18:47:20.238918 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 18:47:20.238935 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 18:47:20.239160 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 18:47:20.239196 kernel: printk: console [ttyS0] disabled Oct 2 18:47:20.239213 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 18:47:20.239230 kernel: printk: console [ttyS0] enabled Oct 2 18:47:20.239247 kernel: printk: bootconsole [uart0] disabled Oct 2 18:47:20.239263 kernel: thunder_xcv, ver 1.0 Oct 2 18:47:20.239280 kernel: thunder_bgx, ver 1.0 Oct 2 18:47:20.239297 kernel: nicpf, ver 1.0 Oct 2 18:47:20.239313 kernel: nicvf, ver 1.0 Oct 2 18:47:20.243983 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 18:47:20.244251 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T18:47:19 UTC (1696272439) Oct 2 18:47:20.244281 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 18:47:20.244298 kernel: NET: Registered PF_INET6 protocol family Oct 2 18:47:20.244315 kernel: Segment Routing with IPv6 Oct 2 18:47:20.244332 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 18:47:20.244348 kernel: NET: Registered PF_PACKET protocol family Oct 2 18:47:20.244365 kernel: Key type dns_resolver registered Oct 2 18:47:20.244382 kernel: registered taskstats version 1 Oct 2 18:47:20.244459 kernel: Loading compiled-in X.509 certificates Oct 2 18:47:20.244480 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 18:47:20.244497 kernel: Key type .fscrypt registered Oct 2 18:47:20.244513 kernel: Key type fscrypt-provisioning registered Oct 2 18:47:20.244530 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 18:47:20.244546 kernel: ima: Allocated hash algorithm: sha1 Oct 2 18:47:20.244562 kernel: ima: No architecture policies found Oct 2 18:47:20.244579 kernel: Freeing unused kernel memory: 34560K Oct 2 18:47:20.244595 kernel: Run /init as init process Oct 2 18:47:20.244617 kernel: with arguments: Oct 2 18:47:20.244634 kernel: /init Oct 2 18:47:20.244649 kernel: with environment: Oct 2 18:47:20.244665 kernel: HOME=/ Oct 2 18:47:20.244681 kernel: TERM=linux Oct 2 18:47:20.244697 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 18:47:20.244719 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:47:20.244741 systemd[1]: Detected virtualization amazon. Oct 2 18:47:20.244765 systemd[1]: Detected architecture arm64. Oct 2 18:47:20.244783 systemd[1]: Running in initrd. Oct 2 18:47:20.244801 systemd[1]: No hostname configured, using default hostname. Oct 2 18:47:20.244818 systemd[1]: Hostname set to . Oct 2 18:47:20.244837 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:47:20.244855 systemd[1]: Queued start job for default target initrd.target. Oct 2 18:47:20.244873 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:47:20.244891 systemd[1]: Reached target cryptsetup.target. Oct 2 18:47:20.244914 systemd[1]: Reached target paths.target. Oct 2 18:47:20.244932 systemd[1]: Reached target slices.target. Oct 2 18:47:20.244949 systemd[1]: Reached target swap.target. Oct 2 18:47:20.244967 systemd[1]: Reached target timers.target. Oct 2 18:47:20.244986 systemd[1]: Listening on iscsid.socket. Oct 2 18:47:20.245003 systemd[1]: Listening on iscsiuio.socket. Oct 2 18:47:20.245022 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 18:47:20.245040 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 18:47:20.245063 systemd[1]: Listening on systemd-journald.socket. Oct 2 18:47:20.245081 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:47:20.245099 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:47:20.245117 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:47:20.245135 systemd[1]: Reached target sockets.target. Oct 2 18:47:20.245154 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:47:20.245171 systemd[1]: Finished network-cleanup.service. Oct 2 18:47:20.245189 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 18:47:20.245208 systemd[1]: Starting systemd-journald.service... Oct 2 18:47:20.245231 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:47:20.245249 systemd[1]: Starting systemd-resolved.service... Oct 2 18:47:20.245266 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 18:47:20.245284 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:47:20.245302 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 18:47:20.245320 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 18:47:20.245338 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 18:47:20.245357 kernel: audit: type=1130 audit(1696272440.211:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.245380 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 18:47:20.245435 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 18:47:20.245468 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 18:47:20.245486 kernel: Bridge firewalling registered Oct 2 18:47:20.245509 systemd-journald[308]: Journal started Oct 2 18:47:20.245620 systemd-journald[308]: Runtime Journal (/run/log/journal/ec20bdbb023838abcd137c60db187730) is 8.0M, max 75.4M, 67.4M free. Oct 2 18:47:20.255284 kernel: audit: type=1130 audit(1696272440.244:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.179218 systemd-modules-load[309]: Inserted module 'overlay' Oct 2 18:47:20.258923 systemd-modules-load[309]: Inserted module 'br_netfilter' Oct 2 18:47:20.266673 systemd[1]: Started systemd-journald.service. Oct 2 18:47:20.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.280434 kernel: audit: type=1130 audit(1696272440.265:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.286447 kernel: SCSI subsystem initialized Oct 2 18:47:20.303441 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 18:47:20.303514 kernel: device-mapper: uevent: version 1.0.3 Oct 2 18:47:20.311916 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 18:47:20.322831 systemd-modules-load[309]: Inserted module 'dm_multipath' Oct 2 18:47:20.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.327215 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:47:20.330645 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:47:20.343285 systemd-resolved[310]: Positive Trust Anchors: Oct 2 18:47:20.343318 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:47:20.348610 kernel: audit: type=1130 audit(1696272440.328:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.343372 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:47:20.376916 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 18:47:20.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.388116 systemd[1]: Starting dracut-cmdline.service... Oct 2 18:47:20.398472 kernel: audit: type=1130 audit(1696272440.379:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.411137 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:47:20.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.422458 kernel: audit: type=1130 audit(1696272440.413:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.441521 dracut-cmdline[333]: dracut-dracut-053 Oct 2 18:47:20.454184 dracut-cmdline[333]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:47:20.704441 kernel: Loading iSCSI transport class v2.0-870. Oct 2 18:47:20.716442 kernel: iscsi: registered transport (tcp) Oct 2 18:47:20.744615 kernel: iscsi: registered transport (qla4xxx) Oct 2 18:47:20.744689 kernel: QLogic iSCSI HBA Driver Oct 2 18:47:20.898314 systemd-resolved[310]: Defaulting to hostname 'linux'. Oct 2 18:47:20.900824 kernel: random: crng init done Oct 2 18:47:20.902539 systemd[1]: Started systemd-resolved.service. Oct 2 18:47:20.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.906174 systemd[1]: Reached target nss-lookup.target. Oct 2 18:47:20.917434 kernel: audit: type=1130 audit(1696272440.904:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.974571 systemd[1]: Finished dracut-cmdline.service. Oct 2 18:47:20.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:20.979585 systemd[1]: Starting dracut-pre-udev.service... Oct 2 18:47:20.988864 kernel: audit: type=1130 audit(1696272440.976:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:21.079452 kernel: raid6: neonx8 gen() 6333 MB/s Oct 2 18:47:21.097456 kernel: raid6: neonx8 xor() 4673 MB/s Oct 2 18:47:21.115462 kernel: raid6: neonx4 gen() 6391 MB/s Oct 2 18:47:21.133455 kernel: raid6: neonx4 xor() 4855 MB/s Oct 2 18:47:21.151471 kernel: raid6: neonx2 gen() 5690 MB/s Oct 2 18:47:21.169458 kernel: raid6: neonx2 xor() 4474 MB/s Oct 2 18:47:21.187468 kernel: raid6: neonx1 gen() 4413 MB/s Oct 2 18:47:21.205458 kernel: raid6: neonx1 xor() 3636 MB/s Oct 2 18:47:21.223468 kernel: raid6: int64x8 gen() 3385 MB/s Oct 2 18:47:21.241454 kernel: raid6: int64x8 xor() 2074 MB/s Oct 2 18:47:21.259465 kernel: raid6: int64x4 gen() 3758 MB/s Oct 2 18:47:21.277458 kernel: raid6: int64x4 xor() 2176 MB/s Oct 2 18:47:21.295481 kernel: raid6: int64x2 gen() 3543 MB/s Oct 2 18:47:21.313456 kernel: raid6: int64x2 xor() 1929 MB/s Oct 2 18:47:21.331470 kernel: raid6: int64x1 gen() 2740 MB/s Oct 2 18:47:21.351113 kernel: raid6: int64x1 xor() 1441 MB/s Oct 2 18:47:21.351182 kernel: raid6: using algorithm neonx4 gen() 6391 MB/s Oct 2 18:47:21.351205 kernel: raid6: .... xor() 4855 MB/s, rmw enabled Oct 2 18:47:21.353010 kernel: raid6: using neon recovery algorithm Oct 2 18:47:21.373471 kernel: xor: measuring software checksum speed Oct 2 18:47:21.375461 kernel: 8regs : 9397 MB/sec Oct 2 18:47:21.378452 kernel: 32regs : 11135 MB/sec Oct 2 18:47:21.382855 kernel: arm64_neon : 9601 MB/sec Oct 2 18:47:21.382925 kernel: xor: using function: 32regs (11135 MB/sec) Oct 2 18:47:21.477466 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 18:47:21.519717 systemd[1]: Finished dracut-pre-udev.service. Oct 2 18:47:21.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:21.524281 systemd[1]: Starting systemd-udevd.service... Oct 2 18:47:21.532714 kernel: audit: type=1130 audit(1696272441.520:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:21.522000 audit: BPF prog-id=7 op=LOAD Oct 2 18:47:21.522000 audit: BPF prog-id=8 op=LOAD Oct 2 18:47:21.567960 systemd-udevd[510]: Using default interface naming scheme 'v252'. Oct 2 18:47:21.579796 systemd[1]: Started systemd-udevd.service. Oct 2 18:47:21.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:21.584634 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 18:47:21.647989 dracut-pre-trigger[515]: rd.md=0: removing MD RAID activation Oct 2 18:47:21.768193 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 18:47:21.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:21.773190 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:47:21.894903 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:47:21.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:22.039105 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 18:47:22.039185 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 18:47:22.051054 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 18:47:22.051439 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 18:47:22.068101 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:9b:50:05:38:65 Oct 2 18:47:22.068426 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 18:47:22.070442 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 18:47:22.073815 (udev-worker)[560]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:47:22.081497 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 18:47:22.089250 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 18:47:22.089323 kernel: GPT:9289727 != 16777215 Oct 2 18:47:22.089347 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 18:47:22.091541 kernel: GPT:9289727 != 16777215 Oct 2 18:47:22.092928 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 18:47:22.092989 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:47:22.197452 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (558) Oct 2 18:47:22.269656 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 18:47:22.385925 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:47:22.428224 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 18:47:22.430964 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 18:47:22.448524 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 18:47:22.467782 systemd[1]: Starting disk-uuid.service... Oct 2 18:47:22.490612 disk-uuid[666]: Primary Header is updated. Oct 2 18:47:22.490612 disk-uuid[666]: Secondary Entries is updated. Oct 2 18:47:22.490612 disk-uuid[666]: Secondary Header is updated. Oct 2 18:47:22.500487 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:47:22.509447 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:47:22.518455 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:47:23.520231 disk-uuid[667]: The operation has completed successfully. Oct 2 18:47:23.522752 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:47:23.822923 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 18:47:23.823624 systemd[1]: Finished disk-uuid.service. Oct 2 18:47:23.839059 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 18:47:23.839102 kernel: audit: type=1130 audit(1696272443.827:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:23.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:23.837000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:23.846410 kernel: audit: type=1131 audit(1696272443.837:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:23.851200 systemd[1]: Starting verity-setup.service... Oct 2 18:47:23.908471 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 18:47:24.013800 systemd[1]: Found device dev-mapper-usr.device. Oct 2 18:47:24.019219 systemd[1]: Mounting sysusr-usr.mount... Oct 2 18:47:24.030022 systemd[1]: Finished verity-setup.service. Oct 2 18:47:24.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.041461 kernel: audit: type=1130 audit(1696272444.032:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.123443 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 18:47:24.125784 systemd[1]: Mounted sysusr-usr.mount. Oct 2 18:47:24.129157 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 18:47:24.132323 systemd[1]: Starting ignition-setup.service... Oct 2 18:47:24.135808 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 18:47:24.176830 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:47:24.176903 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 18:47:24.179136 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 18:47:24.194440 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 18:47:24.231036 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 18:47:24.280441 systemd[1]: Finished ignition-setup.service. Oct 2 18:47:24.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.292716 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 18:47:24.302460 kernel: audit: type=1130 audit(1696272444.281:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.533323 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 18:47:24.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.543000 audit: BPF prog-id=9 op=LOAD Oct 2 18:47:24.546176 systemd[1]: Starting systemd-networkd.service... Oct 2 18:47:24.550460 kernel: audit: type=1130 audit(1696272444.535:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.550502 kernel: audit: type=1334 audit(1696272444.543:21): prog-id=9 op=LOAD Oct 2 18:47:24.608684 systemd-networkd[1179]: lo: Link UP Oct 2 18:47:24.608717 systemd-networkd[1179]: lo: Gained carrier Oct 2 18:47:24.613279 systemd-networkd[1179]: Enumeration completed Oct 2 18:47:24.613837 systemd[1]: Started systemd-networkd.service. Oct 2 18:47:24.632198 kernel: audit: type=1130 audit(1696272444.618:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.615958 systemd-networkd[1179]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:47:24.620357 systemd[1]: Reached target network.target. Oct 2 18:47:24.634001 systemd[1]: Starting iscsiuio.service... Oct 2 18:47:24.653603 systemd-networkd[1179]: eth0: Link UP Oct 2 18:47:24.655255 systemd-networkd[1179]: eth0: Gained carrier Oct 2 18:47:24.663343 systemd[1]: Started iscsiuio.service. Oct 2 18:47:24.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.666808 systemd[1]: Starting iscsid.service... Oct 2 18:47:24.680472 kernel: audit: type=1130 audit(1696272444.663:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.683728 systemd-networkd[1179]: eth0: DHCPv4 address 172.31.30.161/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 18:47:24.698600 iscsid[1185]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:47:24.698600 iscsid[1185]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 18:47:24.698600 iscsid[1185]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 18:47:24.698600 iscsid[1185]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 18:47:24.698600 iscsid[1185]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:47:24.725235 iscsid[1185]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 18:47:24.739216 kernel: audit: type=1130 audit(1696272444.720:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.715986 systemd[1]: Started iscsid.service. Oct 2 18:47:24.728433 systemd[1]: Starting dracut-initqueue.service... Oct 2 18:47:24.779151 systemd[1]: Finished dracut-initqueue.service. Oct 2 18:47:24.794322 kernel: audit: type=1130 audit(1696272444.780:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.781445 systemd[1]: Reached target remote-fs-pre.target. Oct 2 18:47:24.792597 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:47:24.796144 systemd[1]: Reached target remote-fs.target. Oct 2 18:47:24.816489 systemd[1]: Starting dracut-pre-mount.service... Oct 2 18:47:24.851881 systemd[1]: Finished dracut-pre-mount.service. Oct 2 18:47:24.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.929870 ignition[1103]: Ignition 2.14.0 Oct 2 18:47:24.929905 ignition[1103]: Stage: fetch-offline Oct 2 18:47:24.930390 ignition[1103]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:47:24.932003 ignition[1103]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:47:24.953111 ignition[1103]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:47:24.954159 ignition[1103]: Ignition finished successfully Oct 2 18:47:24.959869 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 18:47:24.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:24.965671 systemd[1]: Starting ignition-fetch.service... Oct 2 18:47:24.997022 ignition[1203]: Ignition 2.14.0 Oct 2 18:47:24.997051 ignition[1203]: Stage: fetch Oct 2 18:47:24.997475 ignition[1203]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:47:24.997541 ignition[1203]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:47:25.012918 ignition[1203]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:47:25.015613 ignition[1203]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:47:25.037767 ignition[1203]: INFO : PUT result: OK Oct 2 18:47:25.041645 ignition[1203]: DEBUG : parsed url from cmdline: "" Oct 2 18:47:25.041645 ignition[1203]: INFO : no config URL provided Oct 2 18:47:25.041645 ignition[1203]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 18:47:25.041645 ignition[1203]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 18:47:25.050639 ignition[1203]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:47:25.050639 ignition[1203]: INFO : PUT result: OK Oct 2 18:47:25.050639 ignition[1203]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 18:47:25.057912 ignition[1203]: INFO : GET result: OK Oct 2 18:47:25.059602 ignition[1203]: DEBUG : parsing config with SHA512: b920242e1b158579c9f50183c319966242a9fe41c9734c90dd2b6043e4cc724a7d2e6503fa90f18495cf132a96820906a9b3a894c61724ce3be0da47c8ce498a Oct 2 18:47:25.101977 unknown[1203]: fetched base config from "system" Oct 2 18:47:25.102258 unknown[1203]: fetched base config from "system" Oct 2 18:47:25.104121 ignition[1203]: fetch: fetch complete Oct 2 18:47:25.102274 unknown[1203]: fetched user config from "aws" Oct 2 18:47:25.104139 ignition[1203]: fetch: fetch passed Oct 2 18:47:25.104278 ignition[1203]: Ignition finished successfully Oct 2 18:47:25.115526 systemd[1]: Finished ignition-fetch.service. Oct 2 18:47:25.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:25.120565 systemd[1]: Starting ignition-kargs.service... Oct 2 18:47:25.156696 ignition[1209]: Ignition 2.14.0 Oct 2 18:47:25.156728 ignition[1209]: Stage: kargs Oct 2 18:47:25.157121 ignition[1209]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:47:25.157184 ignition[1209]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:47:25.172533 ignition[1209]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:47:25.175114 ignition[1209]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:47:25.178729 ignition[1209]: INFO : PUT result: OK Oct 2 18:47:25.184706 ignition[1209]: kargs: kargs passed Oct 2 18:47:25.184864 ignition[1209]: Ignition finished successfully Oct 2 18:47:25.189719 systemd[1]: Finished ignition-kargs.service. Oct 2 18:47:25.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:25.194811 systemd[1]: Starting ignition-disks.service... Oct 2 18:47:25.226189 ignition[1215]: Ignition 2.14.0 Oct 2 18:47:25.226223 ignition[1215]: Stage: disks Oct 2 18:47:25.226658 ignition[1215]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:47:25.226718 ignition[1215]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:47:25.242913 ignition[1215]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:47:25.245513 ignition[1215]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:47:25.248806 ignition[1215]: INFO : PUT result: OK Oct 2 18:47:25.254660 ignition[1215]: disks: disks passed Oct 2 18:47:25.254792 ignition[1215]: Ignition finished successfully Oct 2 18:47:25.259721 systemd[1]: Finished ignition-disks.service. Oct 2 18:47:25.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:25.263625 systemd[1]: Reached target initrd-root-device.target. Oct 2 18:47:25.267160 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:47:25.269146 systemd[1]: Reached target local-fs.target. Oct 2 18:47:25.272566 systemd[1]: Reached target sysinit.target. Oct 2 18:47:25.277652 systemd[1]: Reached target basic.target. Oct 2 18:47:25.282547 systemd[1]: Starting systemd-fsck-root.service... Oct 2 18:47:25.349966 systemd-fsck[1223]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 18:47:25.360103 systemd[1]: Finished systemd-fsck-root.service. Oct 2 18:47:25.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:25.365115 systemd[1]: Mounting sysroot.mount... Oct 2 18:47:25.400501 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 18:47:25.403244 systemd[1]: Mounted sysroot.mount. Oct 2 18:47:25.406273 systemd[1]: Reached target initrd-root-fs.target. Oct 2 18:47:25.435932 systemd[1]: Mounting sysroot-usr.mount... Oct 2 18:47:25.438320 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 18:47:25.438447 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 18:47:25.438525 systemd[1]: Reached target ignition-diskful.target. Oct 2 18:47:25.461948 systemd[1]: Mounted sysroot-usr.mount. Oct 2 18:47:25.479668 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 18:47:25.484724 systemd[1]: Starting initrd-setup-root.service... Oct 2 18:47:25.512477 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1240) Oct 2 18:47:25.515946 initrd-setup-root[1245]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 18:47:25.523288 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:47:25.523329 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 18:47:25.523353 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 18:47:25.534443 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 18:47:25.540382 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 18:47:25.558471 initrd-setup-root[1271]: cut: /sysroot/etc/group: No such file or directory Oct 2 18:47:25.579564 initrd-setup-root[1279]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 18:47:25.600890 initrd-setup-root[1287]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 18:47:25.807286 systemd[1]: Finished initrd-setup-root.service. Oct 2 18:47:25.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:25.812392 systemd[1]: Starting ignition-mount.service... Oct 2 18:47:25.815701 systemd[1]: Starting sysroot-boot.service... Oct 2 18:47:25.850759 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 18:47:25.850954 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 18:47:25.878460 systemd[1]: Finished sysroot-boot.service. Oct 2 18:47:25.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:25.900073 ignition[1307]: INFO : Ignition 2.14.0 Oct 2 18:47:25.903954 ignition[1307]: INFO : Stage: mount Oct 2 18:47:25.903954 ignition[1307]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:47:25.903954 ignition[1307]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:47:25.927071 ignition[1307]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:47:25.930205 ignition[1307]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:47:25.933622 ignition[1307]: INFO : PUT result: OK Oct 2 18:47:25.944923 ignition[1307]: INFO : mount: mount passed Oct 2 18:47:25.946932 ignition[1307]: INFO : Ignition finished successfully Oct 2 18:47:25.950227 systemd[1]: Finished ignition-mount.service. Oct 2 18:47:25.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:25.955119 systemd[1]: Starting ignition-files.service... Oct 2 18:47:25.979717 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 18:47:26.005450 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1315) Oct 2 18:47:26.011464 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:47:26.011535 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 18:47:26.011560 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 18:47:26.020444 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 18:47:26.026104 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 18:47:26.064691 ignition[1334]: INFO : Ignition 2.14.0 Oct 2 18:47:26.064691 ignition[1334]: INFO : Stage: files Oct 2 18:47:26.068348 ignition[1334]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:47:26.068348 ignition[1334]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:47:26.091598 ignition[1334]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:47:26.094720 ignition[1334]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:47:26.097904 ignition[1334]: INFO : PUT result: OK Oct 2 18:47:26.103586 ignition[1334]: DEBUG : files: compiled without relabeling support, skipping Oct 2 18:47:26.108126 ignition[1334]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 18:47:26.108126 ignition[1334]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 18:47:26.155983 ignition[1334]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 18:47:26.159158 ignition[1334]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 18:47:26.162934 unknown[1334]: wrote ssh authorized keys file for user: core Oct 2 18:47:26.165328 ignition[1334]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 18:47:26.168177 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 18:47:26.168177 ignition[1334]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 18:47:26.410607 systemd-networkd[1179]: eth0: Gained IPv6LL Oct 2 18:47:26.497117 ignition[1334]: INFO : GET result: OK Oct 2 18:47:26.998731 ignition[1334]: DEBUG : file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 18:47:27.003609 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 18:47:27.007588 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 18:47:27.011732 ignition[1334]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 18:47:27.246863 ignition[1334]: INFO : GET result: OK Oct 2 18:47:27.550680 ignition[1334]: DEBUG : file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 18:47:27.555622 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 18:47:27.555622 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 18:47:27.563694 ignition[1334]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:47:27.577477 ignition[1334]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2720953515" Oct 2 18:47:27.577477 ignition[1334]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2720953515": device or resource busy Oct 2 18:47:27.577477 ignition[1334]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2720953515", trying btrfs: device or resource busy Oct 2 18:47:27.577477 ignition[1334]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2720953515" Oct 2 18:47:27.602638 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1338) Oct 2 18:47:27.598732 systemd[1]: mnt-oem2720953515.mount: Deactivated successfully. Oct 2 18:47:27.605056 ignition[1334]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2720953515" Oct 2 18:47:27.605056 ignition[1334]: INFO : op(3): [started] unmounting "/mnt/oem2720953515" Oct 2 18:47:27.605056 ignition[1334]: INFO : op(3): [finished] unmounting "/mnt/oem2720953515" Oct 2 18:47:27.605056 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 18:47:27.605056 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:47:27.605056 ignition[1334]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 18:47:27.716928 ignition[1334]: INFO : GET result: OK Oct 2 18:47:28.726122 ignition[1334]: DEBUG : file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 18:47:28.731354 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:47:28.731354 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:47:28.731354 ignition[1334]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 18:47:28.785775 ignition[1334]: INFO : GET result: OK Oct 2 18:47:30.514120 ignition[1334]: DEBUG : file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 18:47:30.519511 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:47:30.519511 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 18:47:30.519511 ignition[1334]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 18:47:30.565779 ignition[1334]: INFO : GET result: OK Oct 2 18:47:31.325621 ignition[1334]: DEBUG : file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 18:47:31.330653 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 18:47:31.334350 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:47:31.338036 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:47:31.338036 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 18:47:31.338036 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 18:47:31.338036 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 18:47:31.338036 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 18:47:31.338036 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 18:47:31.338036 ignition[1334]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:47:31.374993 ignition[1334]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3386474577" Oct 2 18:47:31.378016 ignition[1334]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3386474577": device or resource busy Oct 2 18:47:31.378016 ignition[1334]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3386474577", trying btrfs: device or resource busy Oct 2 18:47:31.378016 ignition[1334]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3386474577" Oct 2 18:47:31.399905 ignition[1334]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3386474577" Oct 2 18:47:31.399905 ignition[1334]: INFO : op(6): [started] unmounting "/mnt/oem3386474577" Oct 2 18:47:31.399905 ignition[1334]: INFO : op(6): [finished] unmounting "/mnt/oem3386474577" Oct 2 18:47:31.399905 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 18:47:31.399905 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 18:47:31.399905 ignition[1334]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:47:31.390850 systemd[1]: mnt-oem3386474577.mount: Deactivated successfully. Oct 2 18:47:31.429539 ignition[1334]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem602024212" Oct 2 18:47:31.432620 ignition[1334]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem602024212": device or resource busy Oct 2 18:47:31.432620 ignition[1334]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem602024212", trying btrfs: device or resource busy Oct 2 18:47:31.432620 ignition[1334]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem602024212" Oct 2 18:47:31.443599 ignition[1334]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem602024212" Oct 2 18:47:31.443599 ignition[1334]: INFO : op(9): [started] unmounting "/mnt/oem602024212" Oct 2 18:47:31.454001 systemd[1]: mnt-oem602024212.mount: Deactivated successfully. Oct 2 18:47:31.460007 ignition[1334]: INFO : op(9): [finished] unmounting "/mnt/oem602024212" Oct 2 18:47:31.460007 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 18:47:31.460007 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 18:47:31.488899 ignition[1334]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:47:31.488899 ignition[1334]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2700133630" Oct 2 18:47:31.488899 ignition[1334]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2700133630": device or resource busy Oct 2 18:47:31.488899 ignition[1334]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2700133630", trying btrfs: device or resource busy Oct 2 18:47:31.488899 ignition[1334]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2700133630" Oct 2 18:47:31.518835 ignition[1334]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2700133630" Oct 2 18:47:31.518835 ignition[1334]: INFO : op(c): [started] unmounting "/mnt/oem2700133630" Oct 2 18:47:31.518835 ignition[1334]: INFO : op(c): [finished] unmounting "/mnt/oem2700133630" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(12): [started] processing unit "nvidia.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(12): [finished] processing unit "nvidia.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(13): [started] processing unit "prepare-cni-plugins.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(13): op(14): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(13): op(14): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(13): [finished] processing unit "prepare-cni-plugins.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(15): [started] processing unit "prepare-critools.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(15): op(16): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(15): op(16): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(15): [finished] processing unit "prepare-critools.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(17): [started] setting preset to enabled for "prepare-critools.service" Oct 2 18:47:31.533619 ignition[1334]: INFO : files: op(17): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 18:47:31.597583 ignition[1334]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 18:47:31.597583 ignition[1334]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 18:47:31.597583 ignition[1334]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 18:47:31.597583 ignition[1334]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 18:47:31.597583 ignition[1334]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 18:47:31.597583 ignition[1334]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 18:47:31.597583 ignition[1334]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:47:31.597583 ignition[1334]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:47:31.624897 ignition[1334]: INFO : files: createResultFile: createFiles: op(1c): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:47:31.628892 ignition[1334]: INFO : files: createResultFile: createFiles: op(1c): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:47:31.632587 ignition[1334]: INFO : files: files passed Oct 2 18:47:31.632587 ignition[1334]: INFO : Ignition finished successfully Oct 2 18:47:31.640787 systemd[1]: Finished ignition-files.service. Oct 2 18:47:31.656149 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 18:47:31.656225 kernel: audit: type=1130 audit(1696272451.643:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.654229 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 18:47:31.664378 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 18:47:31.666164 systemd[1]: Starting ignition-quench.service... Oct 2 18:47:31.688291 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 18:47:31.690849 systemd[1]: Finished ignition-quench.service. Oct 2 18:47:31.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.709298 kernel: audit: type=1130 audit(1696272451.693:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.709391 kernel: audit: type=1131 audit(1696272451.693:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.725185 initrd-setup-root-after-ignition[1359]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 18:47:31.731002 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 18:47:31.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.735323 systemd[1]: Reached target ignition-complete.target. Oct 2 18:47:31.752514 kernel: audit: type=1130 audit(1696272451.733:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.746493 systemd[1]: Starting initrd-parse-etc.service... Oct 2 18:47:31.800699 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 18:47:31.801686 systemd[1]: Finished initrd-parse-etc.service. Oct 2 18:47:31.820931 kernel: audit: type=1130 audit(1696272451.803:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.822593 kernel: audit: type=1131 audit(1696272451.811:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.812999 systemd[1]: Reached target initrd-fs.target. Oct 2 18:47:31.822706 systemd[1]: Reached target initrd.target. Oct 2 18:47:31.825619 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 18:47:31.827333 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 18:47:31.876754 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 18:47:31.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.888460 kernel: audit: type=1130 audit(1696272451.877:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.889045 systemd[1]: Starting initrd-cleanup.service... Oct 2 18:47:31.919820 systemd[1]: Stopped target nss-lookup.target. Oct 2 18:47:31.923695 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 18:47:31.927781 systemd[1]: Stopped target timers.target. Oct 2 18:47:31.930916 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 18:47:31.933345 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 18:47:31.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.938824 systemd[1]: Stopped target initrd.target. Oct 2 18:47:31.947599 kernel: audit: type=1131 audit(1696272451.935:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.947686 systemd[1]: Stopped target basic.target. Oct 2 18:47:31.951367 systemd[1]: Stopped target ignition-complete.target. Oct 2 18:47:31.955661 systemd[1]: Stopped target ignition-diskful.target. Oct 2 18:47:31.960008 systemd[1]: Stopped target initrd-root-device.target. Oct 2 18:47:31.964178 systemd[1]: Stopped target remote-fs.target. Oct 2 18:47:31.967877 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 18:47:31.971854 systemd[1]: Stopped target sysinit.target. Oct 2 18:47:31.975561 systemd[1]: Stopped target local-fs.target. Oct 2 18:47:31.979811 systemd[1]: Stopped target local-fs-pre.target. Oct 2 18:47:31.983820 systemd[1]: Stopped target swap.target. Oct 2 18:47:31.987236 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 18:47:31.989621 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 18:47:31.993271 systemd[1]: Stopped target cryptsetup.target. Oct 2 18:47:32.003931 kernel: audit: type=1131 audit(1696272451.991:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:31.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.003987 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 18:47:32.006130 systemd[1]: Stopped dracut-initqueue.service. Oct 2 18:47:32.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.009956 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 18:47:32.019621 kernel: audit: type=1131 audit(1696272452.008:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.010253 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 18:47:32.023844 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 18:47:32.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.025135 systemd[1]: Stopped ignition-files.service. Oct 2 18:47:32.041536 systemd[1]: Stopping ignition-mount.service... Oct 2 18:47:32.044780 iscsid[1185]: iscsid shutting down. Oct 2 18:47:32.049015 systemd[1]: Stopping iscsid.service... Oct 2 18:47:32.057998 systemd[1]: Stopping sysroot-boot.service... Oct 2 18:47:32.061091 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 18:47:32.062039 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 18:47:32.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.079453 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 18:47:32.080229 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 18:47:32.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.091993 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 18:47:32.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.092232 systemd[1]: Stopped iscsid.service. Oct 2 18:47:32.103692 systemd[1]: Stopping iscsiuio.service... Oct 2 18:47:32.109396 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 18:47:32.110172 systemd[1]: Finished initrd-cleanup.service. Oct 2 18:47:32.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.129261 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 18:47:32.130231 systemd[1]: Stopped iscsiuio.service. Oct 2 18:47:32.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.149946 ignition[1372]: INFO : Ignition 2.14.0 Oct 2 18:47:32.152019 ignition[1372]: INFO : Stage: umount Oct 2 18:47:32.154150 ignition[1372]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:47:32.157028 ignition[1372]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:47:32.164663 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 18:47:32.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.164860 systemd[1]: Stopped sysroot-boot.service. Oct 2 18:47:32.185952 ignition[1372]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:47:32.188732 ignition[1372]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:47:32.192865 ignition[1372]: INFO : PUT result: OK Oct 2 18:47:32.201110 ignition[1372]: INFO : umount: umount passed Oct 2 18:47:32.203126 ignition[1372]: INFO : Ignition finished successfully Oct 2 18:47:32.206661 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 18:47:32.207065 systemd[1]: Stopped ignition-mount.service. Oct 2 18:47:32.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.211468 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 18:47:32.211587 systemd[1]: Stopped ignition-disks.service. Oct 2 18:47:32.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.214002 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 18:47:32.214253 systemd[1]: Stopped ignition-kargs.service. Oct 2 18:47:32.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.218077 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 18:47:32.218179 systemd[1]: Stopped ignition-fetch.service. Oct 2 18:47:32.220521 systemd[1]: Stopped target network.target. Oct 2 18:47:32.223232 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 18:47:32.223375 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 18:47:32.227309 systemd[1]: Stopped target paths.target. Oct 2 18:47:32.228937 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 18:47:32.232585 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 18:47:32.238087 systemd[1]: Stopped target slices.target. Oct 2 18:47:32.243848 systemd[1]: Stopped target sockets.target. Oct 2 18:47:32.254648 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 18:47:32.254789 systemd[1]: Closed iscsid.socket. Oct 2 18:47:32.259502 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 18:47:32.259618 systemd[1]: Closed iscsiuio.socket. Oct 2 18:47:32.264745 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 18:47:32.264903 systemd[1]: Stopped ignition-setup.service. Oct 2 18:47:32.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.270271 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 18:47:32.272636 systemd[1]: Stopped initrd-setup-root.service. Oct 2 18:47:32.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.276496 systemd[1]: Stopping systemd-networkd.service... Oct 2 18:47:32.280227 systemd[1]: Stopping systemd-resolved.service... Oct 2 18:47:32.284506 systemd-networkd[1179]: eth0: DHCPv6 lease lost Oct 2 18:47:32.289289 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 18:47:32.291494 systemd[1]: Stopped systemd-networkd.service. Oct 2 18:47:32.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.297095 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 18:47:32.299632 systemd[1]: Stopped systemd-resolved.service. Oct 2 18:47:32.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.302000 audit: BPF prog-id=9 op=UNLOAD Oct 2 18:47:32.303000 audit: BPF prog-id=6 op=UNLOAD Oct 2 18:47:32.304689 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 18:47:32.306973 systemd[1]: Closed systemd-networkd.socket. Oct 2 18:47:32.312277 systemd[1]: Stopping network-cleanup.service... Oct 2 18:47:32.322088 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 18:47:32.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.322239 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 18:47:32.324670 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 18:47:32.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.324784 systemd[1]: Stopped systemd-sysctl.service. Oct 2 18:47:32.327740 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 18:47:32.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.327846 systemd[1]: Stopped systemd-modules-load.service. Oct 2 18:47:32.331763 systemd[1]: Stopping systemd-udevd.service... Oct 2 18:47:32.345047 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 18:47:32.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.345380 systemd[1]: Stopped systemd-udevd.service. Oct 2 18:47:32.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.348951 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 18:47:32.349186 systemd[1]: Stopped network-cleanup.service. Oct 2 18:47:32.353032 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 18:47:32.353131 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 18:47:32.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:32.355109 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 18:47:32.355204 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 18:47:32.358852 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 18:47:32.359165 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 18:47:32.360778 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 18:47:32.360885 systemd[1]: Stopped dracut-cmdline.service. Oct 2 18:47:32.366229 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 18:47:32.366345 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 18:47:32.369832 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 18:47:32.371674 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 18:47:32.371820 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 18:47:32.383646 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 18:47:32.383765 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 18:47:32.387032 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 18:47:32.387146 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 18:47:32.391625 systemd[1]: mnt-oem2700133630.mount: Deactivated successfully. Oct 2 18:47:32.391805 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 18:47:32.391928 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 18:47:32.392037 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 18:47:32.407256 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 18:47:32.407515 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 18:47:32.410875 systemd[1]: Reached target initrd-switch-root.target. Oct 2 18:47:32.415994 systemd[1]: Starting initrd-switch-root.service... Oct 2 18:47:32.492439 systemd-journald[308]: Received SIGTERM from PID 1 (systemd). Oct 2 18:47:32.449260 systemd[1]: Switching root. Oct 2 18:47:32.493828 systemd-journald[308]: Journal stopped Oct 2 18:47:38.073084 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 18:47:38.094499 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 18:47:38.094639 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 18:47:38.094676 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 18:47:38.094708 kernel: SELinux: policy capability open_perms=1 Oct 2 18:47:38.094741 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 18:47:38.094775 kernel: SELinux: policy capability always_check_network=0 Oct 2 18:47:38.094807 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 18:47:38.094838 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 18:47:38.094871 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 18:47:38.094901 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 18:47:38.094940 systemd[1]: Successfully loaded SELinux policy in 88.691ms. Oct 2 18:47:38.095230 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.453ms. Oct 2 18:47:38.095276 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:47:38.095309 systemd[1]: Detected virtualization amazon. Oct 2 18:47:38.095347 systemd[1]: Detected architecture arm64. Oct 2 18:47:38.095380 systemd[1]: Detected first boot. Oct 2 18:47:38.095456 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:47:38.095497 systemd[1]: Populated /etc with preset unit settings. Oct 2 18:47:38.095532 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:47:38.095573 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:47:38.095609 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:47:38.095713 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 18:47:38.095748 kernel: audit: type=1334 audit(1696272457.516:85): prog-id=12 op=LOAD Oct 2 18:47:38.095780 kernel: audit: type=1334 audit(1696272457.516:86): prog-id=3 op=UNLOAD Oct 2 18:47:38.095812 kernel: audit: type=1334 audit(1696272457.518:87): prog-id=13 op=LOAD Oct 2 18:47:38.095850 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 18:47:38.095885 kernel: audit: type=1334 audit(1696272457.521:88): prog-id=14 op=LOAD Oct 2 18:47:38.095918 systemd[1]: Stopped initrd-switch-root.service. Oct 2 18:47:38.095947 kernel: audit: type=1334 audit(1696272457.521:89): prog-id=4 op=UNLOAD Oct 2 18:47:38.095978 kernel: audit: type=1334 audit(1696272457.521:90): prog-id=5 op=UNLOAD Oct 2 18:47:38.096011 kernel: audit: type=1131 audit(1696272457.524:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.096109 kernel: audit: type=1334 audit(1696272457.534:92): prog-id=12 op=UNLOAD Oct 2 18:47:38.096144 kernel: audit: type=1130 audit(1696272457.551:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.097731 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 18:47:38.097791 kernel: audit: type=1131 audit(1696272457.551:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.097901 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 18:47:38.097939 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 18:47:38.097975 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 18:47:38.098009 systemd[1]: Created slice system-getty.slice. Oct 2 18:47:38.098044 systemd[1]: Created slice system-modprobe.slice. Oct 2 18:47:38.098086 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 18:47:38.098133 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 18:47:38.098165 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 18:47:38.098196 systemd[1]: Created slice user.slice. Oct 2 18:47:38.098230 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:47:38.098261 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 18:47:38.098293 systemd[1]: Set up automount boot.automount. Oct 2 18:47:38.098327 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 18:47:38.098358 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 18:47:38.098395 systemd[1]: Stopped target initrd-fs.target. Oct 2 18:47:38.098474 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 18:47:38.098508 systemd[1]: Reached target integritysetup.target. Oct 2 18:47:38.098542 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:47:38.098576 systemd[1]: Reached target remote-fs.target. Oct 2 18:47:38.098607 systemd[1]: Reached target slices.target. Oct 2 18:47:38.098639 systemd[1]: Reached target swap.target. Oct 2 18:47:38.098669 systemd[1]: Reached target torcx.target. Oct 2 18:47:38.098699 systemd[1]: Reached target veritysetup.target. Oct 2 18:47:38.098735 systemd[1]: Listening on systemd-coredump.socket. Oct 2 18:47:38.098766 systemd[1]: Listening on systemd-initctl.socket. Oct 2 18:47:38.098797 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:47:38.098831 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:47:38.098866 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:47:38.098896 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 18:47:38.098926 systemd[1]: Mounting dev-hugepages.mount... Oct 2 18:47:38.098957 systemd[1]: Mounting dev-mqueue.mount... Oct 2 18:47:38.098988 systemd[1]: Mounting media.mount... Oct 2 18:47:38.099019 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 18:47:38.099055 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 18:47:38.099085 systemd[1]: Mounting tmp.mount... Oct 2 18:47:38.099114 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 18:47:38.099146 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 18:47:38.099177 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:47:38.099206 systemd[1]: Starting modprobe@configfs.service... Oct 2 18:47:38.099242 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 18:47:38.099275 systemd[1]: Starting modprobe@drm.service... Oct 2 18:47:38.099308 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 18:47:38.099344 systemd[1]: Starting modprobe@fuse.service... Oct 2 18:47:38.099484 systemd[1]: Starting modprobe@loop.service... Oct 2 18:47:38.099519 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 18:47:38.099551 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 18:47:38.099585 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 18:47:38.099615 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 18:47:38.099651 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 18:47:38.099684 systemd[1]: Stopped systemd-journald.service. Oct 2 18:47:38.099715 systemd[1]: Starting systemd-journald.service... Oct 2 18:47:38.099752 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:47:38.099782 systemd[1]: Starting systemd-network-generator.service... Oct 2 18:47:38.099811 systemd[1]: Starting systemd-remount-fs.service... Oct 2 18:47:38.099843 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:47:38.099876 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 18:47:38.099910 systemd[1]: Stopped verity-setup.service. Oct 2 18:47:38.099942 systemd[1]: Mounted dev-hugepages.mount. Oct 2 18:47:38.099974 systemd[1]: Mounted dev-mqueue.mount. Oct 2 18:47:38.100003 systemd[1]: Mounted media.mount. Oct 2 18:47:38.100039 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 18:47:38.100068 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 18:47:38.100098 systemd[1]: Mounted tmp.mount. Oct 2 18:47:38.100127 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:47:38.100156 kernel: loop: module loaded Oct 2 18:47:38.100186 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 18:47:38.100217 systemd[1]: Finished modprobe@configfs.service. Oct 2 18:47:38.100248 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 18:47:38.100277 kernel: fuse: init (API version 7.34) Oct 2 18:47:38.100314 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 18:47:38.100348 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 18:47:38.100378 systemd[1]: Finished modprobe@drm.service. Oct 2 18:47:38.100432 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 18:47:38.100466 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 18:47:38.100506 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 18:47:38.100547 systemd[1]: Finished modprobe@fuse.service. Oct 2 18:47:38.100582 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 18:47:38.100616 systemd[1]: Finished modprobe@loop.service. Oct 2 18:47:38.100648 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:47:38.100685 systemd[1]: Finished systemd-remount-fs.service. Oct 2 18:47:38.100716 systemd[1]: Finished systemd-network-generator.service. Oct 2 18:47:38.100749 systemd[1]: Reached target network-pre.target. Oct 2 18:47:38.100779 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 18:47:38.100810 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 18:47:38.100850 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 18:47:38.100885 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 18:47:38.100920 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 18:47:38.100954 systemd[1]: Starting systemd-random-seed.service... Oct 2 18:47:38.100992 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 18:47:38.101032 systemd-journald[1482]: Journal started Oct 2 18:47:38.101158 systemd-journald[1482]: Runtime Journal (/run/log/journal/ec20bdbb023838abcd137c60db187730) is 8.0M, max 75.4M, 67.4M free. Oct 2 18:47:33.142000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 18:47:33.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:47:38.126786 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:47:38.126876 systemd[1]: Started systemd-journald.service. Oct 2 18:47:33.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:47:33.363000 audit: BPF prog-id=10 op=LOAD Oct 2 18:47:33.363000 audit: BPF prog-id=10 op=UNLOAD Oct 2 18:47:33.363000 audit: BPF prog-id=11 op=LOAD Oct 2 18:47:33.363000 audit: BPF prog-id=11 op=UNLOAD Oct 2 18:47:37.516000 audit: BPF prog-id=12 op=LOAD Oct 2 18:47:37.516000 audit: BPF prog-id=3 op=UNLOAD Oct 2 18:47:37.518000 audit: BPF prog-id=13 op=LOAD Oct 2 18:47:37.521000 audit: BPF prog-id=14 op=LOAD Oct 2 18:47:37.521000 audit: BPF prog-id=4 op=UNLOAD Oct 2 18:47:37.521000 audit: BPF prog-id=5 op=UNLOAD Oct 2 18:47:37.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.534000 audit: BPF prog-id=12 op=UNLOAD Oct 2 18:47:37.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.871000 audit: BPF prog-id=15 op=LOAD Oct 2 18:47:37.871000 audit: BPF prog-id=16 op=LOAD Oct 2 18:47:37.871000 audit: BPF prog-id=17 op=LOAD Oct 2 18:47:37.871000 audit: BPF prog-id=13 op=UNLOAD Oct 2 18:47:37.871000 audit: BPF prog-id=14 op=UNLOAD Oct 2 18:47:37.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.068000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 18:47:38.068000 audit[1482]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffe5dfeb50 a2=4000 a3=1 items=0 ppid=1 pid=1482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:38.068000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 18:47:38.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:37.513361 systemd[1]: Queued start job for default target multi-user.target. Oct 2 18:47:33.561927 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:47:37.525168 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 18:47:33.571331 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:47:38.117057 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 18:47:33.571387 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:47:38.119357 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 18:47:33.571506 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 18:47:38.126971 systemd[1]: Starting systemd-journal-flush.service... Oct 2 18:47:33.571533 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 18:47:33.571605 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 18:47:33.571637 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 18:47:33.572079 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 18:47:33.572179 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:47:33.572216 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:47:33.573363 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 18:47:33.573499 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 18:47:33.573552 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 18:47:33.573597 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 18:47:33.573652 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 18:47:38.177360 systemd-journald[1482]: Time spent on flushing to /var/log/journal/ec20bdbb023838abcd137c60db187730 is 71.922ms for 1139 entries. Oct 2 18:47:38.177360 systemd-journald[1482]: System Journal (/var/log/journal/ec20bdbb023838abcd137c60db187730) is 8.0M, max 195.6M, 187.6M free. Oct 2 18:47:38.291970 systemd-journald[1482]: Received client request to flush runtime journal. Oct 2 18:47:38.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.218000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:33.573692 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:33Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 18:47:38.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.190596 systemd[1]: Finished systemd-random-seed.service. Oct 2 18:47:36.623636 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:36Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:47:38.192889 systemd[1]: Reached target first-boot-complete.target. Oct 2 18:47:36.624212 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:36Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:47:38.218061 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:47:36.624506 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:36Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:47:38.294726 systemd[1]: Finished systemd-journal-flush.service. Oct 2 18:47:36.624979 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:36Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:47:36.625138 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:36Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 18:47:36.625293 /usr/lib/systemd/system-generators/torcx-generator[1405]: time="2023-10-02T18:47:36Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 18:47:38.340162 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 18:47:38.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.347526 systemd[1]: Starting systemd-sysusers.service... Oct 2 18:47:38.407483 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:47:38.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.413915 systemd[1]: Starting systemd-udev-settle.service... Oct 2 18:47:38.439013 udevadm[1523]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 18:47:38.497895 systemd[1]: Finished systemd-sysusers.service. Oct 2 18:47:38.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:38.504167 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 18:47:38.602253 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 18:47:38.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:39.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:39.168000 audit: BPF prog-id=18 op=LOAD Oct 2 18:47:39.168000 audit: BPF prog-id=19 op=LOAD Oct 2 18:47:39.168000 audit: BPF prog-id=7 op=UNLOAD Oct 2 18:47:39.168000 audit: BPF prog-id=8 op=UNLOAD Oct 2 18:47:39.166475 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 18:47:39.171200 systemd[1]: Starting systemd-udevd.service... Oct 2 18:47:39.223233 systemd-udevd[1526]: Using default interface naming scheme 'v252'. Oct 2 18:47:39.277796 systemd[1]: Started systemd-udevd.service. Oct 2 18:47:39.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:39.280000 audit: BPF prog-id=20 op=LOAD Oct 2 18:47:39.283083 systemd[1]: Starting systemd-networkd.service... Oct 2 18:47:39.302000 audit: BPF prog-id=21 op=LOAD Oct 2 18:47:39.302000 audit: BPF prog-id=22 op=LOAD Oct 2 18:47:39.302000 audit: BPF prog-id=23 op=LOAD Oct 2 18:47:39.305550 systemd[1]: Starting systemd-userdbd.service... Oct 2 18:47:39.432676 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 18:47:39.438759 systemd[1]: Started systemd-userdbd.service. Oct 2 18:47:39.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:39.454476 (udev-worker)[1530]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:47:39.627297 systemd-networkd[1528]: lo: Link UP Oct 2 18:47:39.627324 systemd-networkd[1528]: lo: Gained carrier Oct 2 18:47:39.629033 systemd-networkd[1528]: Enumeration completed Oct 2 18:47:39.629230 systemd[1]: Started systemd-networkd.service. Oct 2 18:47:39.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:39.633589 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 18:47:39.636231 systemd-networkd[1528]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:47:39.643502 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:47:39.647144 systemd-networkd[1528]: eth0: Link UP Oct 2 18:47:39.647511 systemd-networkd[1528]: eth0: Gained carrier Oct 2 18:47:39.680781 systemd-networkd[1528]: eth0: DHCPv4 address 172.31.30.161/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 18:47:39.799466 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1549) Oct 2 18:47:40.004761 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:47:40.007567 systemd[1]: Finished systemd-udev-settle.service. Oct 2 18:47:40.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.012668 systemd[1]: Starting lvm2-activation-early.service... Oct 2 18:47:40.076041 lvm[1645]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:47:40.114739 systemd[1]: Finished lvm2-activation-early.service. Oct 2 18:47:40.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.117245 systemd[1]: Reached target cryptsetup.target. Oct 2 18:47:40.122091 systemd[1]: Starting lvm2-activation.service... Oct 2 18:47:40.137617 lvm[1646]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:47:40.177719 systemd[1]: Finished lvm2-activation.service. Oct 2 18:47:40.179840 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:47:40.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.181793 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 18:47:40.182063 systemd[1]: Reached target local-fs.target. Oct 2 18:47:40.183992 systemd[1]: Reached target machines.target. Oct 2 18:47:40.188853 systemd[1]: Starting ldconfig.service... Oct 2 18:47:40.191314 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 18:47:40.191796 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:47:40.195626 systemd[1]: Starting systemd-boot-update.service... Oct 2 18:47:40.201211 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 18:47:40.206097 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 18:47:40.208341 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:47:40.208591 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:47:40.212136 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 18:47:40.248807 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1648 (bootctl) Oct 2 18:47:40.251295 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 18:47:40.269845 systemd-tmpfiles[1651]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 18:47:40.273584 systemd-tmpfiles[1651]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 18:47:40.276965 systemd-tmpfiles[1651]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 18:47:40.298302 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 18:47:40.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.403115 systemd-fsck[1656]: fsck.fat 4.2 (2021-01-31) Oct 2 18:47:40.403115 systemd-fsck[1656]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 18:47:40.407615 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 18:47:40.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.413981 systemd[1]: Mounting boot.mount... Oct 2 18:47:40.455483 systemd[1]: Mounted boot.mount. Oct 2 18:47:40.484544 systemd[1]: Finished systemd-boot-update.service. Oct 2 18:47:40.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.695177 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 18:47:40.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.699996 systemd[1]: Starting audit-rules.service... Oct 2 18:47:40.705530 systemd[1]: Starting clean-ca-certificates.service... Oct 2 18:47:40.711733 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 18:47:40.714000 audit: BPF prog-id=24 op=LOAD Oct 2 18:47:40.717587 systemd[1]: Starting systemd-resolved.service... Oct 2 18:47:40.719000 audit: BPF prog-id=25 op=LOAD Oct 2 18:47:40.724269 systemd[1]: Starting systemd-timesyncd.service... Oct 2 18:47:40.729011 systemd[1]: Starting systemd-update-utmp.service... Oct 2 18:47:40.776077 systemd[1]: Finished clean-ca-certificates.service. Oct 2 18:47:40.778439 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 18:47:40.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.791000 audit[1676]: SYSTEM_BOOT pid=1676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.811288 systemd[1]: Finished systemd-update-utmp.service. Oct 2 18:47:40.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:40.862148 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 18:47:40.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:41.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:41.010019 systemd[1]: Started systemd-timesyncd.service. Oct 2 18:47:41.012145 systemd[1]: Reached target time-set.target. Oct 2 18:47:41.063629 systemd-resolved[1674]: Positive Trust Anchors: Oct 2 18:47:41.063656 systemd-resolved[1674]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:47:41.063710 systemd-resolved[1674]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:47:41.171000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 18:47:41.171000 audit[1693]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff7896a70 a2=420 a3=0 items=0 ppid=1671 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:41.171000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 18:47:41.173008 augenrules[1693]: No rules Oct 2 18:47:41.174248 systemd[1]: Finished audit-rules.service. Oct 2 18:47:41.283202 systemd-timesyncd[1675]: Contacted time server 72.46.61.205:123 (0.flatcar.pool.ntp.org). Oct 2 18:47:41.283318 systemd-timesyncd[1675]: Initial clock synchronization to Mon 2023-10-02 18:47:40.970261 UTC. Oct 2 18:47:41.314257 systemd-resolved[1674]: Defaulting to hostname 'linux'. Oct 2 18:47:41.318183 systemd[1]: Started systemd-resolved.service. Oct 2 18:47:41.320200 systemd[1]: Reached target network.target. Oct 2 18:47:41.322057 systemd[1]: Reached target nss-lookup.target. Oct 2 18:47:41.578673 systemd-networkd[1528]: eth0: Gained IPv6LL Oct 2 18:47:41.583295 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 18:47:41.585899 systemd[1]: Reached target network-online.target. Oct 2 18:47:42.132889 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 18:47:42.134018 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 18:47:42.153933 ldconfig[1647]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 18:47:42.162376 systemd[1]: Finished ldconfig.service. Oct 2 18:47:42.167466 systemd[1]: Starting systemd-update-done.service... Oct 2 18:47:42.189793 systemd[1]: Finished systemd-update-done.service. Oct 2 18:47:42.192156 systemd[1]: Reached target sysinit.target. Oct 2 18:47:42.194381 systemd[1]: Started motdgen.path. Oct 2 18:47:42.196532 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 18:47:42.199451 systemd[1]: Started logrotate.timer. Oct 2 18:47:42.201562 systemd[1]: Started mdadm.timer. Oct 2 18:47:42.203208 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 18:47:42.205255 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 18:47:42.205572 systemd[1]: Reached target paths.target. Oct 2 18:47:42.207238 systemd[1]: Reached target timers.target. Oct 2 18:47:42.210715 systemd[1]: Listening on dbus.socket. Oct 2 18:47:42.214770 systemd[1]: Starting docker.socket... Oct 2 18:47:42.224033 systemd[1]: Listening on sshd.socket. Oct 2 18:47:42.226196 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:47:42.227444 systemd[1]: Listening on docker.socket. Oct 2 18:47:42.229644 systemd[1]: Reached target sockets.target. Oct 2 18:47:42.231707 systemd[1]: Reached target basic.target. Oct 2 18:47:42.234895 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:47:42.235222 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:47:42.238388 systemd[1]: Started amazon-ssm-agent.service. Oct 2 18:47:42.243528 systemd[1]: Starting containerd.service... Oct 2 18:47:42.248752 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 18:47:42.253215 systemd[1]: Starting dbus.service... Oct 2 18:47:42.260525 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 18:47:42.264928 systemd[1]: Starting extend-filesystems.service... Oct 2 18:47:42.266749 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 18:47:42.269333 systemd[1]: Starting motdgen.service... Oct 2 18:47:42.274971 systemd[1]: Started nvidia.service. Oct 2 18:47:42.280960 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 18:47:42.285082 systemd[1]: Starting prepare-critools.service... Oct 2 18:47:42.292981 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 18:47:42.297219 systemd[1]: Starting sshd-keygen.service... Oct 2 18:47:42.305169 systemd[1]: Starting systemd-logind.service... Oct 2 18:47:42.374163 jq[1718]: true Oct 2 18:47:42.306834 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:47:42.384022 jq[1708]: false Oct 2 18:47:42.306981 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 18:47:42.307906 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 18:47:42.309556 systemd[1]: Starting update-engine.service... Oct 2 18:47:42.317710 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 18:47:42.388119 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 18:47:42.388544 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 18:47:42.418159 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 18:47:42.418633 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 18:47:42.487564 tar[1720]: ./ Oct 2 18:47:42.487564 tar[1720]: ./macvlan Oct 2 18:47:42.530520 tar[1722]: crictl Oct 2 18:47:42.545228 jq[1723]: true Oct 2 18:47:42.600638 dbus-daemon[1707]: [system] SELinux support is enabled Oct 2 18:47:42.600955 systemd[1]: Started dbus.service. Oct 2 18:47:42.605971 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 18:47:42.606020 systemd[1]: Reached target system-config.target. Oct 2 18:47:42.613540 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 18:47:42.613579 systemd[1]: Reached target user-config.target. Oct 2 18:47:42.653705 dbus-daemon[1707]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1528 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 18:47:42.661243 dbus-daemon[1707]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 18:47:42.676878 extend-filesystems[1709]: Found nvme0n1 Oct 2 18:47:42.678987 extend-filesystems[1709]: Found nvme0n1p1 Oct 2 18:47:42.682027 systemd[1]: Starting systemd-hostnamed.service... Oct 2 18:47:42.684602 extend-filesystems[1709]: Found nvme0n1p2 Oct 2 18:47:42.686763 extend-filesystems[1709]: Found nvme0n1p3 Oct 2 18:47:42.690685 extend-filesystems[1709]: Found usr Oct 2 18:47:42.694483 extend-filesystems[1709]: Found nvme0n1p4 Oct 2 18:47:42.694483 extend-filesystems[1709]: Found nvme0n1p6 Oct 2 18:47:42.694483 extend-filesystems[1709]: Found nvme0n1p7 Oct 2 18:47:42.694483 extend-filesystems[1709]: Found nvme0n1p9 Oct 2 18:47:42.694483 extend-filesystems[1709]: Checking size of /dev/nvme0n1p9 Oct 2 18:47:42.730576 update_engine[1717]: I1002 18:47:42.729094 1717 main.cc:92] Flatcar Update Engine starting Oct 2 18:47:42.751061 systemd[1]: Started update-engine.service. Oct 2 18:47:42.756129 systemd[1]: Started locksmithd.service. Oct 2 18:47:42.758475 update_engine[1717]: I1002 18:47:42.758414 1717 update_check_scheduler.cc:74] Next update check in 3m40s Oct 2 18:47:42.771868 amazon-ssm-agent[1704]: 2023/10/02 18:47:42 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 18:47:42.782129 amazon-ssm-agent[1704]: Initializing new seelog logger Oct 2 18:47:42.782373 amazon-ssm-agent[1704]: New Seelog Logger Creation Complete Oct 2 18:47:42.782559 amazon-ssm-agent[1704]: 2023/10/02 18:47:42 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 18:47:42.782559 amazon-ssm-agent[1704]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 18:47:42.783079 amazon-ssm-agent[1704]: 2023/10/02 18:47:42 processing appconfig overrides Oct 2 18:47:42.823392 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 18:47:42.823820 systemd[1]: Finished motdgen.service. Oct 2 18:47:42.866833 extend-filesystems[1709]: Resized partition /dev/nvme0n1p9 Oct 2 18:47:42.901626 extend-filesystems[1774]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 18:47:42.942433 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 18:47:42.967495 systemd-logind[1716]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 18:47:42.985115 systemd-logind[1716]: New seat seat0. Oct 2 18:47:42.995780 systemd[1]: Started systemd-logind.service. Oct 2 18:47:43.010435 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 18:47:43.033090 extend-filesystems[1774]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 18:47:43.033090 extend-filesystems[1774]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 18:47:43.033090 extend-filesystems[1774]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 18:47:43.053725 extend-filesystems[1709]: Resized filesystem in /dev/nvme0n1p9 Oct 2 18:47:43.055874 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 18:47:43.056244 systemd[1]: Finished extend-filesystems.service. Oct 2 18:47:43.061024 bash[1783]: Updated "/home/core/.ssh/authorized_keys" Oct 2 18:47:43.062339 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 18:47:43.088722 env[1725]: time="2023-10-02T18:47:43.088599178Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 18:47:43.173739 tar[1720]: ./static Oct 2 18:47:43.196750 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 18:47:43.206091 env[1725]: time="2023-10-02T18:47:43.205993477Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 18:47:43.206379 env[1725]: time="2023-10-02T18:47:43.206303346Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:47:43.218704 env[1725]: time="2023-10-02T18:47:43.218623558Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:47:43.218704 env[1725]: time="2023-10-02T18:47:43.218693744Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:47:43.219179 env[1725]: time="2023-10-02T18:47:43.219112949Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:47:43.219179 env[1725]: time="2023-10-02T18:47:43.219171754Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 18:47:43.219386 env[1725]: time="2023-10-02T18:47:43.219206789Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 18:47:43.219386 env[1725]: time="2023-10-02T18:47:43.219233016Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 18:47:43.219600 env[1725]: time="2023-10-02T18:47:43.219541216Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:47:43.220361 env[1725]: time="2023-10-02T18:47:43.220285506Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:47:43.228947 env[1725]: time="2023-10-02T18:47:43.228838674Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:47:43.229093 env[1725]: time="2023-10-02T18:47:43.228935747Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 18:47:43.229232 env[1725]: time="2023-10-02T18:47:43.229178988Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 18:47:43.229331 env[1725]: time="2023-10-02T18:47:43.229240876Z" level=info msg="metadata content store policy set" policy=shared Oct 2 18:47:43.237771 env[1725]: time="2023-10-02T18:47:43.237699913Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 18:47:43.237937 env[1725]: time="2023-10-02T18:47:43.237806201Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 18:47:43.237937 env[1725]: time="2023-10-02T18:47:43.237842395Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 18:47:43.237937 env[1725]: time="2023-10-02T18:47:43.237915710Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 18:47:43.238146 env[1725]: time="2023-10-02T18:47:43.237954396Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 18:47:43.238146 env[1725]: time="2023-10-02T18:47:43.237991853Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 18:47:43.238146 env[1725]: time="2023-10-02T18:47:43.238055097Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 18:47:43.238728 env[1725]: time="2023-10-02T18:47:43.238670570Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 18:47:43.238881 env[1725]: time="2023-10-02T18:47:43.238743619Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 18:47:43.238881 env[1725]: time="2023-10-02T18:47:43.238780172Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 18:47:43.238881 env[1725]: time="2023-10-02T18:47:43.238827863Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 18:47:43.238881 env[1725]: time="2023-10-02T18:47:43.238860070Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 18:47:43.239225 env[1725]: time="2023-10-02T18:47:43.239099231Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 18:47:43.239504 env[1725]: time="2023-10-02T18:47:43.239446743Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 18:47:43.240010 env[1725]: time="2023-10-02T18:47:43.239953367Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 18:47:43.240150 env[1725]: time="2023-10-02T18:47:43.240027007Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.240150 env[1725]: time="2023-10-02T18:47:43.240061242Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 18:47:43.240281 env[1725]: time="2023-10-02T18:47:43.240232095Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.240281 env[1725]: time="2023-10-02T18:47:43.240271013Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.240420 env[1725]: time="2023-10-02T18:47:43.240301980Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.240420 env[1725]: time="2023-10-02T18:47:43.240331209Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.240420 env[1725]: time="2023-10-02T18:47:43.240360148Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.240420 env[1725]: time="2023-10-02T18:47:43.240434738Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.240420 env[1725]: time="2023-10-02T18:47:43.240469043Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.240420 env[1725]: time="2023-10-02T18:47:43.240527941Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.240420 env[1725]: time="2023-10-02T18:47:43.240564865Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 18:47:43.241165 env[1725]: time="2023-10-02T18:47:43.240893173Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.241165 env[1725]: time="2023-10-02T18:47:43.240934686Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.241165 env[1725]: time="2023-10-02T18:47:43.240966569Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.241165 env[1725]: time="2023-10-02T18:47:43.240994998Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 18:47:43.241165 env[1725]: time="2023-10-02T18:47:43.241047394Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 18:47:43.241165 env[1725]: time="2023-10-02T18:47:43.241074769Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 18:47:43.241165 env[1725]: time="2023-10-02T18:47:43.241110708Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 18:47:43.241590 env[1725]: time="2023-10-02T18:47:43.241177429Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 18:47:43.241697 env[1725]: time="2023-10-02T18:47:43.241578669Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 18:47:43.242854 env[1725]: time="2023-10-02T18:47:43.241704207Z" level=info msg="Connect containerd service" Oct 2 18:47:43.242854 env[1725]: time="2023-10-02T18:47:43.241767474Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 18:47:43.251143 env[1725]: time="2023-10-02T18:47:43.251057955Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 18:47:43.251939 env[1725]: time="2023-10-02T18:47:43.251878516Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 18:47:43.252068 env[1725]: time="2023-10-02T18:47:43.252007032Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 18:47:43.252220 systemd[1]: Started containerd.service. Oct 2 18:47:43.255602 env[1725]: time="2023-10-02T18:47:43.255533246Z" level=info msg="containerd successfully booted in 0.178464s" Oct 2 18:47:43.261456 env[1725]: time="2023-10-02T18:47:43.261175950Z" level=info msg="Start subscribing containerd event" Oct 2 18:47:43.261456 env[1725]: time="2023-10-02T18:47:43.261300943Z" level=info msg="Start recovering state" Oct 2 18:47:43.278839 env[1725]: time="2023-10-02T18:47:43.278758057Z" level=info msg="Start event monitor" Oct 2 18:47:43.279007 env[1725]: time="2023-10-02T18:47:43.278950385Z" level=info msg="Start snapshots syncer" Oct 2 18:47:43.279079 env[1725]: time="2023-10-02T18:47:43.279006050Z" level=info msg="Start cni network conf syncer for default" Oct 2 18:47:43.279079 env[1725]: time="2023-10-02T18:47:43.279030017Z" level=info msg="Start streaming server" Oct 2 18:47:43.327938 tar[1720]: ./vlan Oct 2 18:47:43.376667 dbus-daemon[1707]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 18:47:43.376943 systemd[1]: Started systemd-hostnamed.service. Oct 2 18:47:43.381068 dbus-daemon[1707]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1754 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 18:47:43.389009 systemd[1]: Starting polkit.service... Oct 2 18:47:43.469734 polkitd[1802]: Started polkitd version 121 Oct 2 18:47:43.507807 polkitd[1802]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 18:47:43.514613 polkitd[1802]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 18:47:43.518470 polkitd[1802]: Finished loading, compiling and executing 2 rules Oct 2 18:47:43.519429 dbus-daemon[1707]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 18:47:43.519709 systemd[1]: Started polkit.service. Oct 2 18:47:43.525820 polkitd[1802]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 18:47:43.533244 tar[1720]: ./portmap Oct 2 18:47:43.605088 systemd-hostnamed[1754]: Hostname set to (transient) Oct 2 18:47:43.605249 systemd-resolved[1674]: System hostname changed to 'ip-172-31-30-161'. Oct 2 18:47:43.694593 tar[1720]: ./host-local Oct 2 18:47:43.800247 coreos-metadata[1706]: Oct 02 18:47:43.799 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 18:47:43.802885 coreos-metadata[1706]: Oct 02 18:47:43.802 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 18:47:43.805491 coreos-metadata[1706]: Oct 02 18:47:43.805 INFO Fetch successful Oct 2 18:47:43.805491 coreos-metadata[1706]: Oct 02 18:47:43.805 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 18:47:43.807527 coreos-metadata[1706]: Oct 02 18:47:43.807 INFO Fetch successful Oct 2 18:47:43.816706 unknown[1706]: wrote ssh authorized keys file for user: core Oct 2 18:47:43.834768 tar[1720]: ./vrf Oct 2 18:47:43.853208 update-ssh-keys[1844]: Updated "/home/core/.ssh/authorized_keys" Oct 2 18:47:43.854676 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 18:47:43.858706 amazon-ssm-agent[1704]: 2023-10-02 18:47:43 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-07bcf2ca8066a2e70 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-07bcf2ca8066a2e70 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 18:47:43.858706 amazon-ssm-agent[1704]: status code: 400, request id: 626dfcb1-3982-4e2b-9f69-b12455f664cf Oct 2 18:47:43.858706 amazon-ssm-agent[1704]: 2023-10-02 18:47:43 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 18:47:44.002921 tar[1720]: ./bridge Oct 2 18:47:44.146841 tar[1720]: ./tuning Oct 2 18:47:44.293002 tar[1720]: ./firewall Oct 2 18:47:44.411461 tar[1720]: ./host-device Oct 2 18:47:44.535774 tar[1720]: ./sbr Oct 2 18:47:44.613888 tar[1720]: ./loopback Oct 2 18:47:44.708624 tar[1720]: ./dhcp Oct 2 18:47:44.721784 systemd[1]: Finished prepare-critools.service. Oct 2 18:47:44.862909 tar[1720]: ./ptp Oct 2 18:47:44.927563 tar[1720]: ./ipvlan Oct 2 18:47:44.990864 tar[1720]: ./bandwidth Oct 2 18:47:45.079216 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 18:47:45.110559 locksmithd[1763]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 18:47:45.404326 sshd_keygen[1749]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 18:47:45.465822 systemd[1]: Finished sshd-keygen.service. Oct 2 18:47:45.470765 systemd[1]: Starting issuegen.service... Oct 2 18:47:45.491199 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 18:47:45.491700 systemd[1]: Finished issuegen.service. Oct 2 18:47:45.497585 systemd[1]: Starting systemd-user-sessions.service... Oct 2 18:47:45.520940 systemd[1]: Finished systemd-user-sessions.service. Oct 2 18:47:45.525969 systemd[1]: Started getty@tty1.service. Oct 2 18:47:45.531058 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 18:47:45.533584 systemd[1]: Reached target getty.target. Oct 2 18:47:45.535644 systemd[1]: Reached target multi-user.target. Oct 2 18:47:45.540886 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 18:47:45.566864 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 18:47:45.567252 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 18:47:45.569805 systemd[1]: Startup finished in 1.289s (kernel) + 13.424s (initrd) + 12.540s (userspace) = 27.254s. Oct 2 18:47:51.747034 systemd[1]: Created slice system-sshd.slice. Oct 2 18:47:51.749628 systemd[1]: Started sshd@0-172.31.30.161:22-139.178.89.65:41434.service. Oct 2 18:47:51.961832 sshd[1915]: Accepted publickey for core from 139.178.89.65 port 41434 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:47:51.967682 sshd[1915]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:51.987739 systemd[1]: Created slice user-500.slice. Oct 2 18:47:51.991039 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 18:47:51.996944 systemd-logind[1716]: New session 1 of user core. Oct 2 18:47:52.017821 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 18:47:52.021894 systemd[1]: Starting user@500.service... Oct 2 18:47:52.035574 (systemd)[1918]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:52.248840 systemd[1918]: Queued start job for default target default.target. Oct 2 18:47:52.249999 systemd[1918]: Reached target paths.target. Oct 2 18:47:52.250059 systemd[1918]: Reached target sockets.target. Oct 2 18:47:52.250093 systemd[1918]: Reached target timers.target. Oct 2 18:47:52.250124 systemd[1918]: Reached target basic.target. Oct 2 18:47:52.250235 systemd[1918]: Reached target default.target. Oct 2 18:47:52.250310 systemd[1918]: Startup finished in 195ms. Oct 2 18:47:52.251224 systemd[1]: Started user@500.service. Oct 2 18:47:52.254701 systemd[1]: Started session-1.scope. Oct 2 18:47:52.423663 systemd[1]: Started sshd@1-172.31.30.161:22-139.178.89.65:41450.service. Oct 2 18:47:52.606160 sshd[1927]: Accepted publickey for core from 139.178.89.65 port 41450 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:47:52.609981 sshd[1927]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:52.622512 systemd-logind[1716]: New session 2 of user core. Oct 2 18:47:52.623354 systemd[1]: Started session-2.scope. Oct 2 18:47:52.780715 sshd[1927]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:52.789128 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 18:47:52.790346 systemd[1]: sshd@1-172.31.30.161:22-139.178.89.65:41450.service: Deactivated successfully. Oct 2 18:47:52.792195 systemd-logind[1716]: Session 2 logged out. Waiting for processes to exit. Oct 2 18:47:52.794646 systemd-logind[1716]: Removed session 2. Oct 2 18:47:52.816205 systemd[1]: Started sshd@2-172.31.30.161:22-139.178.89.65:41454.service. Oct 2 18:47:53.005559 sshd[1933]: Accepted publickey for core from 139.178.89.65 port 41454 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:47:53.009022 sshd[1933]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:53.018072 systemd-logind[1716]: New session 3 of user core. Oct 2 18:47:53.019092 systemd[1]: Started session-3.scope. Oct 2 18:47:53.156440 sshd[1933]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:53.164321 systemd[1]: sshd@2-172.31.30.161:22-139.178.89.65:41454.service: Deactivated successfully. Oct 2 18:47:53.164857 systemd-logind[1716]: Session 3 logged out. Waiting for processes to exit. Oct 2 18:47:53.165693 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 18:47:53.168615 systemd-logind[1716]: Removed session 3. Oct 2 18:47:53.190365 systemd[1]: Started sshd@3-172.31.30.161:22-139.178.89.65:41466.service. Oct 2 18:47:53.379072 sshd[1939]: Accepted publickey for core from 139.178.89.65 port 41466 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:47:53.382567 sshd[1939]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:53.391543 systemd-logind[1716]: New session 4 of user core. Oct 2 18:47:53.392696 systemd[1]: Started session-4.scope. Oct 2 18:47:53.543252 sshd[1939]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:53.550324 systemd-logind[1716]: Session 4 logged out. Waiting for processes to exit. Oct 2 18:47:53.550943 systemd[1]: sshd@3-172.31.30.161:22-139.178.89.65:41466.service: Deactivated successfully. Oct 2 18:47:53.552323 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 18:47:53.553943 systemd-logind[1716]: Removed session 4. Oct 2 18:47:53.574101 systemd[1]: Started sshd@4-172.31.30.161:22-139.178.89.65:41478.service. Oct 2 18:47:53.764678 sshd[1945]: Accepted publickey for core from 139.178.89.65 port 41478 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:47:53.768322 sshd[1945]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:53.778598 systemd[1]: Started session-5.scope. Oct 2 18:47:53.779499 systemd-logind[1716]: New session 5 of user core. Oct 2 18:47:53.913072 sudo[1948]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 18:47:53.914294 sudo[1948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:47:53.930760 dbus-daemon[1707]: avc: received setenforce notice (enforcing=1) Oct 2 18:47:53.933800 sudo[1948]: pam_unix(sudo:session): session closed for user root Oct 2 18:47:53.959904 sshd[1945]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:53.965987 systemd-logind[1716]: Session 5 logged out. Waiting for processes to exit. Oct 2 18:47:53.966544 systemd[1]: sshd@4-172.31.30.161:22-139.178.89.65:41478.service: Deactivated successfully. Oct 2 18:47:53.967979 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 18:47:53.970003 systemd-logind[1716]: Removed session 5. Oct 2 18:47:53.990266 systemd[1]: Started sshd@5-172.31.30.161:22-139.178.89.65:41482.service. Oct 2 18:47:54.180660 sshd[1952]: Accepted publickey for core from 139.178.89.65 port 41482 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:47:54.183496 sshd[1952]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:54.193833 systemd-logind[1716]: New session 6 of user core. Oct 2 18:47:54.194061 systemd[1]: Started session-6.scope. Oct 2 18:47:54.319237 sudo[1956]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 18:47:54.320390 sudo[1956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:47:54.328965 sudo[1956]: pam_unix(sudo:session): session closed for user root Oct 2 18:47:54.343877 sudo[1955]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 18:47:54.344496 sudo[1955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:47:54.370941 systemd[1]: Stopping audit-rules.service... Oct 2 18:47:54.374000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:47:54.376276 auditctl[1959]: No rules Oct 2 18:47:54.377728 kernel: kauditd_printk_skb: 66 callbacks suppressed Oct 2 18:47:54.377869 kernel: audit: type=1305 audit(1696272474.374:157): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:47:54.382127 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 18:47:54.374000 audit[1959]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd02117b0 a2=420 a3=0 items=0 ppid=1 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:54.382841 systemd[1]: Stopped audit-rules.service. Oct 2 18:47:54.392690 systemd[1]: Starting audit-rules.service... Oct 2 18:47:54.394242 kernel: audit: type=1300 audit(1696272474.374:157): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd02117b0 a2=420 a3=0 items=0 ppid=1 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:54.374000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:47:54.398973 kernel: audit: type=1327 audit(1696272474.374:157): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:47:54.399137 kernel: audit: type=1131 audit(1696272474.381:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.465051 augenrules[1976]: No rules Oct 2 18:47:54.467082 systemd[1]: Finished audit-rules.service. Oct 2 18:47:54.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.475890 sudo[1955]: pam_unix(sudo:session): session closed for user root Oct 2 18:47:54.475000 audit[1955]: USER_END pid=1955 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.485380 kernel: audit: type=1130 audit(1696272474.467:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.485564 kernel: audit: type=1106 audit(1696272474.475:160): pid=1955 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.475000 audit[1955]: CRED_DISP pid=1955 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.494215 kernel: audit: type=1104 audit(1696272474.475:161): pid=1955 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.507753 sshd[1952]: pam_unix(sshd:session): session closed for user core Oct 2 18:47:54.508000 audit[1952]: USER_END pid=1952 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:47:54.513086 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 18:47:54.514311 systemd[1]: sshd@5-172.31.30.161:22-139.178.89.65:41482.service: Deactivated successfully. Oct 2 18:47:54.508000 audit[1952]: CRED_DISP pid=1952 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:47:54.533531 kernel: audit: type=1106 audit(1696272474.508:162): pid=1952 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:47:54.533698 kernel: audit: type=1104 audit(1696272474.508:163): pid=1952 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:47:54.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.30.161:22-139.178.89.65:41482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.533798 systemd-logind[1716]: Session 6 logged out. Waiting for processes to exit. Oct 2 18:47:54.543714 kernel: audit: type=1131 audit(1696272474.513:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.30.161:22-139.178.89.65:41482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.544847 systemd[1]: Started sshd@6-172.31.30.161:22-139.178.89.65:41484.service. Oct 2 18:47:54.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.161:22-139.178.89.65:41484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.548143 systemd-logind[1716]: Removed session 6. Oct 2 18:47:54.734000 audit[1982]: USER_ACCT pid=1982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:47:54.736548 sshd[1982]: Accepted publickey for core from 139.178.89.65 port 41484 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:47:54.738000 audit[1982]: CRED_ACQ pid=1982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:47:54.738000 audit[1982]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe355f660 a2=3 a3=1 items=0 ppid=1 pid=1982 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:54.738000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:47:54.740742 sshd[1982]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:47:54.750966 systemd[1]: Started session-7.scope. Oct 2 18:47:54.751870 systemd-logind[1716]: New session 7 of user core. Oct 2 18:47:54.761000 audit[1982]: USER_START pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:47:54.768000 audit[1984]: CRED_ACQ pid=1984 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:47:54.874000 audit[1985]: USER_ACCT pid=1985 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.876117 sudo[1985]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 18:47:54.874000 audit[1985]: CRED_REFR pid=1985 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:47:54.876805 sudo[1985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:47:54.879000 audit[1985]: USER_START pid=1985 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:47:55.865682 systemd[1]: Starting docker.service... Oct 2 18:47:55.985931 env[2000]: time="2023-10-02T18:47:55.985813283Z" level=info msg="Starting up" Oct 2 18:47:55.990328 env[2000]: time="2023-10-02T18:47:55.990267573Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 18:47:55.990568 env[2000]: time="2023-10-02T18:47:55.990536499Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 18:47:55.990767 env[2000]: time="2023-10-02T18:47:55.990729691Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 18:47:55.990895 env[2000]: time="2023-10-02T18:47:55.990866430Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 18:47:55.995874 env[2000]: time="2023-10-02T18:47:55.995821891Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 18:47:55.996115 env[2000]: time="2023-10-02T18:47:55.996075110Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 18:47:55.996288 env[2000]: time="2023-10-02T18:47:55.996245290Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 18:47:55.996488 env[2000]: time="2023-10-02T18:47:55.996455225Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 18:47:56.051388 env[2000]: time="2023-10-02T18:47:56.051304948Z" level=info msg="Loading containers: start." Oct 2 18:47:56.171000 audit[2030]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.171000 audit[2030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd6a3c0f0 a2=0 a3=1 items=0 ppid=2000 pid=2030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.171000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 18:47:56.179000 audit[2032]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2032 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.179000 audit[2032]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc7e270f0 a2=0 a3=1 items=0 ppid=2000 pid=2032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.179000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 18:47:56.187000 audit[2034]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2034 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.187000 audit[2034]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd3eadfc0 a2=0 a3=1 items=0 ppid=2000 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.187000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 18:47:56.194000 audit[2036]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.194000 audit[2036]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc6fdccc0 a2=0 a3=1 items=0 ppid=2000 pid=2036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.194000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 18:47:56.203000 audit[2038]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.203000 audit[2038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffe0a8150 a2=0 a3=1 items=0 ppid=2000 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.203000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 18:47:56.239000 audit[2043]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2043 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.239000 audit[2043]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd4122030 a2=0 a3=1 items=0 ppid=2000 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.239000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 18:47:56.257000 audit[2045]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.257000 audit[2045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff2604f10 a2=0 a3=1 items=0 ppid=2000 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.257000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 18:47:56.264000 audit[2047]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.264000 audit[2047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc25592e0 a2=0 a3=1 items=0 ppid=2000 pid=2047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.264000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 18:47:56.272000 audit[2049]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.272000 audit[2049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd6d899b0 a2=0 a3=1 items=0 ppid=2000 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.272000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:47:56.294000 audit[2053]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.294000 audit[2053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff920f280 a2=0 a3=1 items=0 ppid=2000 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.294000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:47:56.298000 audit[2054]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.298000 audit[2054]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd196f940 a2=0 a3=1 items=0 ppid=2000 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.298000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:47:56.312456 kernel: Initializing XFRM netlink socket Oct 2 18:47:56.359934 env[2000]: time="2023-10-02T18:47:56.359877163Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 18:47:56.362575 (udev-worker)[2010]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:47:56.402000 audit[2062]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.402000 audit[2062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd5109200 a2=0 a3=1 items=0 ppid=2000 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.402000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 18:47:56.424000 audit[2065]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.424000 audit[2065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc1bd6950 a2=0 a3=1 items=0 ppid=2000 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.424000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 18:47:56.437000 audit[2068]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.437000 audit[2068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc7b25fd0 a2=0 a3=1 items=0 ppid=2000 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.437000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 18:47:56.446000 audit[2070]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.446000 audit[2070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff2c8ffa0 a2=0 a3=1 items=0 ppid=2000 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.446000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 18:47:56.455000 audit[2072]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.455000 audit[2072]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffeffa8f50 a2=0 a3=1 items=0 ppid=2000 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.455000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 18:47:56.463000 audit[2074]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.463000 audit[2074]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd8046b60 a2=0 a3=1 items=0 ppid=2000 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.463000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 18:47:56.471000 audit[2076]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.471000 audit[2076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd3324c30 a2=0 a3=1 items=0 ppid=2000 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.471000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 18:47:56.489000 audit[2080]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.489000 audit[2080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffecde1750 a2=0 a3=1 items=0 ppid=2000 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.489000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 18:47:56.499000 audit[2082]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.499000 audit[2082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffff0987b90 a2=0 a3=1 items=0 ppid=2000 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.499000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 18:47:56.506000 audit[2084]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.506000 audit[2084]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffdbd5c320 a2=0 a3=1 items=0 ppid=2000 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.506000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 18:47:56.514000 audit[2086]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.514000 audit[2086]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffce2329f0 a2=0 a3=1 items=0 ppid=2000 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.514000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 18:47:56.516546 systemd-networkd[1528]: docker0: Link UP Oct 2 18:47:56.538000 audit[2090]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.538000 audit[2090]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe5cbe940 a2=0 a3=1 items=0 ppid=2000 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.538000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:47:56.542000 audit[2091]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2091 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:47:56.542000 audit[2091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff5b07cc0 a2=0 a3=1 items=0 ppid=2000 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:47:56.542000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:47:56.545066 env[2000]: time="2023-10-02T18:47:56.544963985Z" level=info msg="Loading containers: done." Oct 2 18:47:56.576261 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck820686480-merged.mount: Deactivated successfully. Oct 2 18:47:56.593341 env[2000]: time="2023-10-02T18:47:56.593261284Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 18:47:56.593739 env[2000]: time="2023-10-02T18:47:56.593694831Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 18:47:56.593952 env[2000]: time="2023-10-02T18:47:56.593924879Z" level=info msg="Daemon has completed initialization" Oct 2 18:47:56.632349 systemd[1]: Started docker.service. Oct 2 18:47:56.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:56.646511 env[2000]: time="2023-10-02T18:47:56.646316251Z" level=info msg="API listen on /run/docker.sock" Oct 2 18:47:56.703253 systemd[1]: Reloading. Oct 2 18:47:56.887553 /usr/lib/systemd/system-generators/torcx-generator[2138]: time="2023-10-02T18:47:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:47:56.887618 /usr/lib/systemd/system-generators/torcx-generator[2138]: time="2023-10-02T18:47:56Z" level=info msg="torcx already run" Oct 2 18:47:57.163245 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:47:57.163980 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:47:57.210841 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:47:57.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.383000 audit: BPF prog-id=34 op=LOAD Oct 2 18:47:57.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.384000 audit: BPF prog-id=35 op=LOAD Oct 2 18:47:57.384000 audit: BPF prog-id=18 op=UNLOAD Oct 2 18:47:57.386000 audit: BPF prog-id=19 op=UNLOAD Oct 2 18:47:57.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.390000 audit: BPF prog-id=36 op=LOAD Oct 2 18:47:57.390000 audit: BPF prog-id=25 op=UNLOAD Oct 2 18:47:57.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.393000 audit: BPF prog-id=37 op=LOAD Oct 2 18:47:57.394000 audit: BPF prog-id=32 op=UNLOAD Oct 2 18:47:57.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.397000 audit: BPF prog-id=38 op=LOAD Oct 2 18:47:57.397000 audit: BPF prog-id=20 op=UNLOAD Oct 2 18:47:57.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.399000 audit: BPF prog-id=39 op=LOAD Oct 2 18:47:57.400000 audit: BPF prog-id=29 op=UNLOAD Oct 2 18:47:57.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.401000 audit: BPF prog-id=40 op=LOAD Oct 2 18:47:57.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.402000 audit: BPF prog-id=41 op=LOAD Oct 2 18:47:57.403000 audit: BPF prog-id=30 op=UNLOAD Oct 2 18:47:57.403000 audit: BPF prog-id=31 op=UNLOAD Oct 2 18:47:57.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.406000 audit: BPF prog-id=42 op=LOAD Oct 2 18:47:57.406000 audit: BPF prog-id=15 op=UNLOAD Oct 2 18:47:57.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.408000 audit: BPF prog-id=43 op=LOAD Oct 2 18:47:57.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.409000 audit: BPF prog-id=44 op=LOAD Oct 2 18:47:57.410000 audit: BPF prog-id=16 op=UNLOAD Oct 2 18:47:57.410000 audit: BPF prog-id=17 op=UNLOAD Oct 2 18:47:57.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.416000 audit: BPF prog-id=45 op=LOAD Oct 2 18:47:57.416000 audit: BPF prog-id=21 op=UNLOAD Oct 2 18:47:57.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.417000 audit: BPF prog-id=46 op=LOAD Oct 2 18:47:57.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.419000 audit: BPF prog-id=47 op=LOAD Oct 2 18:47:57.419000 audit: BPF prog-id=22 op=UNLOAD Oct 2 18:47:57.419000 audit: BPF prog-id=23 op=UNLOAD Oct 2 18:47:57.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.424000 audit: BPF prog-id=48 op=LOAD Oct 2 18:47:57.424000 audit: BPF prog-id=26 op=UNLOAD Oct 2 18:47:57.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.426000 audit: BPF prog-id=49 op=LOAD Oct 2 18:47:57.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.427000 audit: BPF prog-id=50 op=LOAD Oct 2 18:47:57.427000 audit: BPF prog-id=27 op=UNLOAD Oct 2 18:47:57.427000 audit: BPF prog-id=28 op=UNLOAD Oct 2 18:47:57.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:47:57.430000 audit: BPF prog-id=51 op=LOAD Oct 2 18:47:57.430000 audit: BPF prog-id=24 op=UNLOAD Oct 2 18:47:57.476376 systemd[1]: Started kubelet.service. Oct 2 18:47:57.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:47:57.688356 kubelet[2193]: E1002 18:47:57.688184 2193 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 18:47:57.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:47:57.693599 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:47:57.693952 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:47:58.150394 env[1725]: time="2023-10-02T18:47:58.150167822Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 18:47:58.847020 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4263741511.mount: Deactivated successfully. Oct 2 18:48:02.410922 env[1725]: time="2023-10-02T18:48:02.410855128Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:02.413874 env[1725]: time="2023-10-02T18:48:02.413813586Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:02.417591 env[1725]: time="2023-10-02T18:48:02.417517490Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:02.421584 env[1725]: time="2023-10-02T18:48:02.421523382Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:02.423456 env[1725]: time="2023-10-02T18:48:02.423349759Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 18:48:02.455472 env[1725]: time="2023-10-02T18:48:02.455359163Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 18:48:05.877434 env[1725]: time="2023-10-02T18:48:05.877329154Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:05.884124 env[1725]: time="2023-10-02T18:48:05.881997126Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:05.887535 env[1725]: time="2023-10-02T18:48:05.886717442Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:05.891456 env[1725]: time="2023-10-02T18:48:05.891342664Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:05.893845 env[1725]: time="2023-10-02T18:48:05.893782561Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 18:48:05.927000 env[1725]: time="2023-10-02T18:48:05.926933372Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 18:48:07.780394 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 18:48:07.790914 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 18:48:07.791028 kernel: audit: type=1130 audit(1696272487.779:407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:07.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:07.780826 systemd[1]: Stopped kubelet.service. Oct 2 18:48:07.783728 systemd[1]: Started kubelet.service. Oct 2 18:48:07.802316 kernel: audit: type=1131 audit(1696272487.779:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:07.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:07.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:07.814249 kernel: audit: type=1130 audit(1696272487.782:409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:07.959653 kubelet[2223]: E1002 18:48:07.959550 2223 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 18:48:07.967893 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:48:07.968251 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:48:07.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:48:07.977452 kernel: audit: type=1131 audit(1696272487.968:410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:48:08.351206 env[1725]: time="2023-10-02T18:48:08.351124770Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:08.355727 env[1725]: time="2023-10-02T18:48:08.355656616Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:08.359341 env[1725]: time="2023-10-02T18:48:08.359250387Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:08.365619 env[1725]: time="2023-10-02T18:48:08.365521020Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:08.366243 env[1725]: time="2023-10-02T18:48:08.366181081Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 18:48:08.397138 env[1725]: time="2023-10-02T18:48:08.397087535Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 18:48:09.819283 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount17539704.mount: Deactivated successfully. Oct 2 18:48:10.520770 env[1725]: time="2023-10-02T18:48:10.520679133Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:10.525257 env[1725]: time="2023-10-02T18:48:10.524516426Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:10.527540 env[1725]: time="2023-10-02T18:48:10.527382071Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:10.530996 env[1725]: time="2023-10-02T18:48:10.530920063Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:10.531575 env[1725]: time="2023-10-02T18:48:10.531510478Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 18:48:10.563473 env[1725]: time="2023-10-02T18:48:10.563177259Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 18:48:11.076801 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1924835304.mount: Deactivated successfully. Oct 2 18:48:11.087090 env[1725]: time="2023-10-02T18:48:11.087027283Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:11.090154 env[1725]: time="2023-10-02T18:48:11.090096256Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:11.092766 env[1725]: time="2023-10-02T18:48:11.092690129Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:11.096675 env[1725]: time="2023-10-02T18:48:11.096583563Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:11.099652 env[1725]: time="2023-10-02T18:48:11.098180291Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 18:48:11.135478 env[1725]: time="2023-10-02T18:48:11.135381552Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 18:48:12.361829 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount473506193.mount: Deactivated successfully. Oct 2 18:48:13.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:13.638787 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 18:48:13.649461 kernel: audit: type=1131 audit(1696272493.638:411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:13.671000 audit: BPF prog-id=41 op=UNLOAD Oct 2 18:48:13.671000 audit: BPF prog-id=40 op=UNLOAD Oct 2 18:48:13.676897 kernel: audit: type=1334 audit(1696272493.671:412): prog-id=41 op=UNLOAD Oct 2 18:48:13.677047 kernel: audit: type=1334 audit(1696272493.671:413): prog-id=40 op=UNLOAD Oct 2 18:48:13.677105 kernel: audit: type=1334 audit(1696272493.671:414): prog-id=39 op=UNLOAD Oct 2 18:48:13.671000 audit: BPF prog-id=39 op=UNLOAD Oct 2 18:48:15.354746 env[1725]: time="2023-10-02T18:48:15.354682172Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:15.357550 env[1725]: time="2023-10-02T18:48:15.357493819Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:15.360886 env[1725]: time="2023-10-02T18:48:15.360827790Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:15.364471 env[1725]: time="2023-10-02T18:48:15.364339046Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:15.366625 env[1725]: time="2023-10-02T18:48:15.366548728Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 18:48:15.397799 env[1725]: time="2023-10-02T18:48:15.397734951Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 18:48:15.987932 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1505066046.mount: Deactivated successfully. Oct 2 18:48:16.888980 env[1725]: time="2023-10-02T18:48:16.888918471Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:16.893352 env[1725]: time="2023-10-02T18:48:16.893267840Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:16.897765 env[1725]: time="2023-10-02T18:48:16.897690188Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:16.900289 env[1725]: time="2023-10-02T18:48:16.900210726Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:16.902525 env[1725]: time="2023-10-02T18:48:16.901601029Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 18:48:18.030459 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 18:48:18.030807 systemd[1]: Stopped kubelet.service. Oct 2 18:48:18.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:18.041667 systemd[1]: Started kubelet.service. Oct 2 18:48:18.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:18.050140 kernel: audit: type=1130 audit(1696272498.030:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:18.050300 kernel: audit: type=1131 audit(1696272498.030:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:18.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:18.066658 kernel: audit: type=1130 audit(1696272498.041:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:18.212566 kubelet[2308]: E1002 18:48:18.212454 2308 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 18:48:18.217063 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:48:18.217489 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:48:18.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:48:18.226490 kernel: audit: type=1131 audit(1696272498.217:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:48:23.419564 systemd[1]: Stopped kubelet.service. Oct 2 18:48:23.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:23.429437 kernel: audit: type=1130 audit(1696272503.419:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:23.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:23.438442 kernel: audit: type=1131 audit(1696272503.428:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:23.484363 systemd[1]: Reloading. Oct 2 18:48:23.670942 /usr/lib/systemd/system-generators/torcx-generator[2340]: time="2023-10-02T18:48:23Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:48:23.671009 /usr/lib/systemd/system-generators/torcx-generator[2340]: time="2023-10-02T18:48:23Z" level=info msg="torcx already run" Oct 2 18:48:23.935331 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:48:23.935735 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:48:23.982889 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:48:24.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158252 kernel: audit: type=1400 audit(1696272504.141:421): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158437 kernel: audit: type=1400 audit(1696272504.141:422): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158508 kernel: audit: type=1400 audit(1696272504.141:423): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.173566 kernel: audit: type=1400 audit(1696272504.142:424): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.173736 kernel: audit: type=1400 audit(1696272504.142:425): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.188848 kernel: audit: type=1400 audit(1696272504.142:426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.189026 kernel: audit: type=1400 audit(1696272504.142:427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.198917 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 18:48:24.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.149000 audit: BPF prog-id=52 op=LOAD Oct 2 18:48:24.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.157000 audit: BPF prog-id=53 op=LOAD Oct 2 18:48:24.157000 audit: BPF prog-id=34 op=UNLOAD Oct 2 18:48:24.157000 audit: BPF prog-id=35 op=UNLOAD Oct 2 18:48:24.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.164000 audit: BPF prog-id=54 op=LOAD Oct 2 18:48:24.164000 audit: BPF prog-id=36 op=UNLOAD Oct 2 18:48:24.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.172000 audit: BPF prog-id=55 op=LOAD Oct 2 18:48:24.172000 audit: BPF prog-id=37 op=UNLOAD Oct 2 18:48:24.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.179000 audit: BPF prog-id=56 op=LOAD Oct 2 18:48:24.180000 audit: BPF prog-id=38 op=UNLOAD Oct 2 18:48:24.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.187000 audit: BPF prog-id=57 op=LOAD Oct 2 18:48:24.187000 audit: BPF prog-id=42 op=UNLOAD Oct 2 18:48:24.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit: BPF prog-id=58 op=LOAD Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.202000 audit: BPF prog-id=59 op=LOAD Oct 2 18:48:24.202000 audit: BPF prog-id=43 op=UNLOAD Oct 2 18:48:24.202000 audit: BPF prog-id=44 op=UNLOAD Oct 2 18:48:24.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit: BPF prog-id=60 op=LOAD Oct 2 18:48:24.207000 audit: BPF prog-id=45 op=UNLOAD Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit: BPF prog-id=61 op=LOAD Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.207000 audit: BPF prog-id=62 op=LOAD Oct 2 18:48:24.207000 audit: BPF prog-id=46 op=UNLOAD Oct 2 18:48:24.207000 audit: BPF prog-id=47 op=UNLOAD Oct 2 18:48:24.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit: BPF prog-id=63 op=LOAD Oct 2 18:48:24.211000 audit: BPF prog-id=48 op=UNLOAD Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit: BPF prog-id=64 op=LOAD Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.211000 audit: BPF prog-id=65 op=LOAD Oct 2 18:48:24.212000 audit: BPF prog-id=49 op=UNLOAD Oct 2 18:48:24.212000 audit: BPF prog-id=50 op=UNLOAD Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:24.213000 audit: BPF prog-id=66 op=LOAD Oct 2 18:48:24.213000 audit: BPF prog-id=51 op=UNLOAD Oct 2 18:48:24.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:24.260307 systemd[1]: Started kubelet.service. Oct 2 18:48:24.422273 kubelet[2393]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:48:24.422273 kubelet[2393]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:48:24.422922 kubelet[2393]: I1002 18:48:24.422533 2393 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 18:48:24.425089 kubelet[2393]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:48:24.425089 kubelet[2393]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:48:25.099230 kubelet[2393]: I1002 18:48:25.099182 2393 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 18:48:25.099611 kubelet[2393]: I1002 18:48:25.099581 2393 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 18:48:25.100169 kubelet[2393]: I1002 18:48:25.100124 2393 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 18:48:25.108197 kubelet[2393]: E1002 18:48:25.108140 2393 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.30.161:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.108382 kubelet[2393]: I1002 18:48:25.108216 2393 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:48:25.112454 kubelet[2393]: W1002 18:48:25.112392 2393 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:48:25.117176 kubelet[2393]: I1002 18:48:25.117111 2393 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 18:48:25.118258 kubelet[2393]: I1002 18:48:25.118206 2393 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 18:48:25.118650 kubelet[2393]: I1002 18:48:25.118613 2393 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 18:48:25.119179 kubelet[2393]: I1002 18:48:25.119132 2393 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 18:48:25.119379 kubelet[2393]: I1002 18:48:25.119352 2393 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 18:48:25.119889 kubelet[2393]: I1002 18:48:25.119846 2393 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:48:25.130322 kubelet[2393]: I1002 18:48:25.130271 2393 kubelet.go:398] "Attempting to sync node with API server" Oct 2 18:48:25.130322 kubelet[2393]: I1002 18:48:25.130327 2393 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 18:48:25.130625 kubelet[2393]: I1002 18:48:25.130565 2393 kubelet.go:297] "Adding apiserver pod source" Oct 2 18:48:25.130625 kubelet[2393]: I1002 18:48:25.130597 2393 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 18:48:25.130964 kubelet[2393]: W1002 18:48:25.130886 2393 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.30.161:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-161&limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.131169 kubelet[2393]: E1002 18:48:25.131140 2393 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.30.161:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-161&limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.132381 kubelet[2393]: W1002 18:48:25.131920 2393 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.30.161:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.132381 kubelet[2393]: E1002 18:48:25.132021 2393 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.30.161:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.132708 kubelet[2393]: I1002 18:48:25.132535 2393 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 18:48:25.134000 kubelet[2393]: W1002 18:48:25.133934 2393 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 18:48:25.135046 kubelet[2393]: I1002 18:48:25.134975 2393 server.go:1186] "Started kubelet" Oct 2 18:48:25.137000 audit[2393]: AVC avc: denied { mac_admin } for pid=2393 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:25.137000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:48:25.137000 audit[2393]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000de7830 a1=4000dbaca8 a2=4000de7800 a3=25 items=0 ppid=1 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.137000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:48:25.137000 audit[2393]: AVC avc: denied { mac_admin } for pid=2393 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:25.137000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:48:25.137000 audit[2393]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400029ecc0 a1=4000dbacc0 a2=4000de78c0 a3=25 items=0 ppid=1 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.137000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:48:25.139744 kubelet[2393]: I1002 18:48:25.138933 2393 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 18:48:25.139744 kubelet[2393]: I1002 18:48:25.139016 2393 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 18:48:25.139744 kubelet[2393]: I1002 18:48:25.139163 2393 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 18:48:25.143337 kubelet[2393]: E1002 18:48:25.142463 2393 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb2ed46848", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 134934088, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 134934088, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.30.161:6443/api/v1/namespaces/default/events": dial tcp 172.31.30.161:6443: connect: connection refused'(may retry after sleeping) Oct 2 18:48:25.146623 kubelet[2393]: I1002 18:48:25.146524 2393 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 18:48:25.147865 kubelet[2393]: I1002 18:48:25.147801 2393 server.go:451] "Adding debug handlers to kubelet server" Oct 2 18:48:25.151247 kubelet[2393]: E1002 18:48:25.151174 2393 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 18:48:25.151247 kubelet[2393]: E1002 18:48:25.151234 2393 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 18:48:25.151561 kubelet[2393]: I1002 18:48:25.151476 2393 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 18:48:25.151644 kubelet[2393]: I1002 18:48:25.151599 2393 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 18:48:25.154278 kubelet[2393]: W1002 18:48:25.152371 2393 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.30.161:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.154278 kubelet[2393]: E1002 18:48:25.152512 2393 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.30.161:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.154278 kubelet[2393]: E1002 18:48:25.153253 2393 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.31.30.161:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-161?timeout=10s": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.156000 audit[2404]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.156000 audit[2404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc8ab3bb0 a2=0 a3=1 items=0 ppid=2393 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.156000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:48:25.162000 audit[2405]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.162000 audit[2405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd5b39f0 a2=0 a3=1 items=0 ppid=2393 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.162000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:48:25.177000 audit[2408]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.177000 audit[2408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff5800740 a2=0 a3=1 items=0 ppid=2393 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.177000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:48:25.185000 audit[2410]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.185000 audit[2410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffefaa9e20 a2=0 a3=1 items=0 ppid=2393 pid=2410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.185000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:48:25.213000 audit[2416]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.213000 audit[2416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffdc841f70 a2=0 a3=1 items=0 ppid=2393 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.213000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 18:48:25.216535 kubelet[2393]: I1002 18:48:25.216498 2393 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 18:48:25.216777 kubelet[2393]: I1002 18:48:25.216751 2393 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 18:48:25.217000 kubelet[2393]: I1002 18:48:25.216958 2393 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:48:25.219000 audit[2417]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.219000 audit[2417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffff51d3f0 a2=0 a3=1 items=0 ppid=2393 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.219000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 18:48:25.222800 kubelet[2393]: I1002 18:48:25.222752 2393 policy_none.go:49] "None policy: Start" Oct 2 18:48:25.224798 kubelet[2393]: I1002 18:48:25.224752 2393 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 18:48:25.225021 kubelet[2393]: I1002 18:48:25.224997 2393 state_mem.go:35] "Initializing new in-memory state store" Oct 2 18:48:25.236818 systemd[1]: Created slice kubepods.slice. Oct 2 18:48:25.246063 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 18:48:25.254013 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 18:48:25.256877 kubelet[2393]: I1002 18:48:25.256817 2393 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-161" Oct 2 18:48:25.258348 kubelet[2393]: E1002 18:48:25.258297 2393 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.161:6443/api/v1/nodes\": dial tcp 172.31.30.161:6443: connect: connection refused" node="ip-172-31-30-161" Oct 2 18:48:25.261000 audit[2421]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.261000 audit[2421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc60825e0 a2=0 a3=1 items=0 ppid=2393 pid=2421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.261000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 18:48:25.264097 kubelet[2393]: I1002 18:48:25.264061 2393 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 18:48:25.263000 audit[2393]: AVC avc: denied { mac_admin } for pid=2393 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:25.263000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:48:25.263000 audit[2393]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000de39b0 a1=4000f35800 a2=4000de3980 a3=25 items=0 ppid=1 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.263000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:48:25.266879 kubelet[2393]: I1002 18:48:25.266843 2393 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 18:48:25.267458 kubelet[2393]: I1002 18:48:25.267421 2393 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 18:48:25.269621 kubelet[2393]: E1002 18:48:25.269113 2393 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-30-161\" not found" Oct 2 18:48:25.285000 audit[2424]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.285000 audit[2424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=fffff65f1db0 a2=0 a3=1 items=0 ppid=2393 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.285000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 18:48:25.289000 audit[2425]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.289000 audit[2425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd0733420 a2=0 a3=1 items=0 ppid=2393 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.289000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 18:48:25.293000 audit[2426]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.293000 audit[2426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf13a690 a2=0 a3=1 items=0 ppid=2393 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.293000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:48:25.302000 audit[2428]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.302000 audit[2428]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffec41cfb0 a2=0 a3=1 items=0 ppid=2393 pid=2428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.302000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 18:48:25.311000 audit[2430]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.311000 audit[2430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe50a9d50 a2=0 a3=1 items=0 ppid=2393 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.311000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:48:25.320000 audit[2432]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.320000 audit[2432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffe7bd9c70 a2=0 a3=1 items=0 ppid=2393 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.320000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 18:48:25.329000 audit[2434]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.329000 audit[2434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffffbf8a9e0 a2=0 a3=1 items=0 ppid=2393 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.329000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 18:48:25.340000 audit[2436]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.340000 audit[2436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=ffffddbc6680 a2=0 a3=1 items=0 ppid=2393 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.340000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 18:48:25.342956 kubelet[2393]: I1002 18:48:25.342912 2393 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 18:48:25.345000 audit[2438]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.345000 audit[2438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffda5aebe0 a2=0 a3=1 items=0 ppid=2393 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.345000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:48:25.345000 audit[2437]: NETFILTER_CFG table=mangle:42 family=10 entries=2 op=nft_register_chain pid=2437 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.345000 audit[2437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffec5ab3f0 a2=0 a3=1 items=0 ppid=2393 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.345000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:48:25.349000 audit[2439]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.349000 audit[2439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6677ed0 a2=0 a3=1 items=0 ppid=2393 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:48:25.353000 audit[2441]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:25.353000 audit[2441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd008c750 a2=0 a3=1 items=0 ppid=2393 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.353000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:48:25.358386 kubelet[2393]: E1002 18:48:25.355788 2393 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.31.30.161:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-161?timeout=10s": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.357000 audit[2440]: NETFILTER_CFG table=nat:45 family=10 entries=2 op=nft_register_chain pid=2440 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.357000 audit[2440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffffcf72ba0 a2=0 a3=1 items=0 ppid=2393 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.357000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 18:48:25.365000 audit[2443]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2443 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.365000 audit[2443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffb131730 a2=0 a3=1 items=0 ppid=2393 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.365000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 18:48:25.369000 audit[2444]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2444 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.369000 audit[2444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffcc38a140 a2=0 a3=1 items=0 ppid=2393 pid=2444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.369000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:48:25.384000 audit[2446]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2446 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.384000 audit[2446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffc2562e20 a2=0 a3=1 items=0 ppid=2393 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 18:48:25.389000 audit[2447]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2447 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.389000 audit[2447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc3239bb0 a2=0 a3=1 items=0 ppid=2393 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.389000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 18:48:25.393000 audit[2448]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2448 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.393000 audit[2448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4919e00 a2=0 a3=1 items=0 ppid=2393 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.393000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:48:25.404000 audit[2450]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2450 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.404000 audit[2450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffe3f4690 a2=0 a3=1 items=0 ppid=2393 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.404000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 18:48:25.413000 audit[2452]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2452 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.413000 audit[2452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffff94e1920 a2=0 a3=1 items=0 ppid=2393 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.413000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:48:25.423000 audit[2454]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2454 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.423000 audit[2454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffec1e5d10 a2=0 a3=1 items=0 ppid=2393 pid=2454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.423000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 18:48:25.432000 audit[2456]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2456 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.432000 audit[2456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffc791feb0 a2=0 a3=1 items=0 ppid=2393 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 18:48:25.443000 audit[2458]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2458 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.443000 audit[2458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffde5f3d40 a2=0 a3=1 items=0 ppid=2393 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.443000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 18:48:25.446301 kubelet[2393]: I1002 18:48:25.446243 2393 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 18:48:25.446301 kubelet[2393]: I1002 18:48:25.446290 2393 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 18:48:25.447051 kubelet[2393]: I1002 18:48:25.446324 2393 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 18:48:25.447051 kubelet[2393]: E1002 18:48:25.446435 2393 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 18:48:25.448398 kubelet[2393]: W1002 18:48:25.448342 2393 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.30.161:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.448692 kubelet[2393]: E1002 18:48:25.448661 2393 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.30.161:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.448000 audit[2459]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2459 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.448000 audit[2459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff8e96280 a2=0 a3=1 items=0 ppid=2393 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.448000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:48:25.452000 audit[2460]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2460 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.452000 audit[2460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdb0d8ef0 a2=0 a3=1 items=0 ppid=2393 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.452000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:48:25.456000 audit[2461]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2461 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:25.456000 audit[2461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff675ca80 a2=0 a3=1 items=0 ppid=2393 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:25.456000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:48:25.461184 kubelet[2393]: I1002 18:48:25.461122 2393 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-161" Oct 2 18:48:25.462010 kubelet[2393]: E1002 18:48:25.461969 2393 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.161:6443/api/v1/nodes\": dial tcp 172.31.30.161:6443: connect: connection refused" node="ip-172-31-30-161" Oct 2 18:48:25.547180 kubelet[2393]: I1002 18:48:25.547105 2393 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:25.549266 kubelet[2393]: I1002 18:48:25.549196 2393 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:25.551296 kubelet[2393]: I1002 18:48:25.551223 2393 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:25.556042 kubelet[2393]: I1002 18:48:25.556003 2393 status_manager.go:698] "Failed to get status for pod" podUID=f05ed361a410aff0f0878b118a98ee8d pod="kube-system/kube-controller-manager-ip-172-31-30-161" err="Get \"https://172.31.30.161:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-30-161\": dial tcp 172.31.30.161:6443: connect: connection refused" Oct 2 18:48:25.557174 kubelet[2393]: I1002 18:48:25.556988 2393 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/185b61981935ccc4d0ca03ed4aac3d44-ca-certs\") pod \"kube-apiserver-ip-172-31-30-161\" (UID: \"185b61981935ccc4d0ca03ed4aac3d44\") " pod="kube-system/kube-apiserver-ip-172-31-30-161" Oct 2 18:48:25.557174 kubelet[2393]: I1002 18:48:25.557065 2393 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/185b61981935ccc4d0ca03ed4aac3d44-k8s-certs\") pod \"kube-apiserver-ip-172-31-30-161\" (UID: \"185b61981935ccc4d0ca03ed4aac3d44\") " pod="kube-system/kube-apiserver-ip-172-31-30-161" Oct 2 18:48:25.557681 kubelet[2393]: I1002 18:48:25.557135 2393 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/185b61981935ccc4d0ca03ed4aac3d44-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-30-161\" (UID: \"185b61981935ccc4d0ca03ed4aac3d44\") " pod="kube-system/kube-apiserver-ip-172-31-30-161" Oct 2 18:48:25.557681 kubelet[2393]: I1002 18:48:25.557338 2393 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-ca-certs\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:25.557681 kubelet[2393]: I1002 18:48:25.557397 2393 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-kubeconfig\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:25.557681 kubelet[2393]: I1002 18:48:25.557492 2393 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:25.557681 kubelet[2393]: I1002 18:48:25.557542 2393 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:25.558062 kubelet[2393]: I1002 18:48:25.557588 2393 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-k8s-certs\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:25.558384 kubelet[2393]: I1002 18:48:25.558347 2393 status_manager.go:698] "Failed to get status for pod" podUID=185b61981935ccc4d0ca03ed4aac3d44 pod="kube-system/kube-apiserver-ip-172-31-30-161" err="Get \"https://172.31.30.161:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-30-161\": dial tcp 172.31.30.161:6443: connect: connection refused" Oct 2 18:48:25.558770 kubelet[2393]: I1002 18:48:25.558631 2393 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/72b690b80c494b73ad077a14da76b1a2-kubeconfig\") pod \"kube-scheduler-ip-172-31-30-161\" (UID: \"72b690b80c494b73ad077a14da76b1a2\") " pod="kube-system/kube-scheduler-ip-172-31-30-161" Oct 2 18:48:25.560519 kubelet[2393]: I1002 18:48:25.560476 2393 status_manager.go:698] "Failed to get status for pod" podUID=72b690b80c494b73ad077a14da76b1a2 pod="kube-system/kube-scheduler-ip-172-31-30-161" err="Get \"https://172.31.30.161:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-30-161\": dial tcp 172.31.30.161:6443: connect: connection refused" Oct 2 18:48:25.566113 systemd[1]: Created slice kubepods-burstable-podf05ed361a410aff0f0878b118a98ee8d.slice. Oct 2 18:48:25.586661 systemd[1]: Created slice kubepods-burstable-pod185b61981935ccc4d0ca03ed4aac3d44.slice. Oct 2 18:48:25.599287 systemd[1]: Created slice kubepods-burstable-pod72b690b80c494b73ad077a14da76b1a2.slice. Oct 2 18:48:25.758474 kubelet[2393]: E1002 18:48:25.756938 2393 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.31.30.161:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-161?timeout=10s": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:25.864965 kubelet[2393]: I1002 18:48:25.864925 2393 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-161" Oct 2 18:48:25.865881 kubelet[2393]: E1002 18:48:25.865848 2393 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.161:6443/api/v1/nodes\": dial tcp 172.31.30.161:6443: connect: connection refused" node="ip-172-31-30-161" Oct 2 18:48:25.884127 env[1725]: time="2023-10-02T18:48:25.883428960Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-30-161,Uid:f05ed361a410aff0f0878b118a98ee8d,Namespace:kube-system,Attempt:0,}" Oct 2 18:48:25.896512 env[1725]: time="2023-10-02T18:48:25.896444740Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-30-161,Uid:185b61981935ccc4d0ca03ed4aac3d44,Namespace:kube-system,Attempt:0,}" Oct 2 18:48:25.905340 env[1725]: time="2023-10-02T18:48:25.905282550Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-161,Uid:72b690b80c494b73ad077a14da76b1a2,Namespace:kube-system,Attempt:0,}" Oct 2 18:48:26.111430 kubelet[2393]: W1002 18:48:26.111316 2393 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.30.161:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:26.111619 kubelet[2393]: E1002 18:48:26.111460 2393 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.30.161:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:26.399304 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3651969530.mount: Deactivated successfully. Oct 2 18:48:26.409104 env[1725]: time="2023-10-02T18:48:26.409010883Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.411003 env[1725]: time="2023-10-02T18:48:26.410936478Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.416337 env[1725]: time="2023-10-02T18:48:26.416258203Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.418583 env[1725]: time="2023-10-02T18:48:26.418504170Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.423580 env[1725]: time="2023-10-02T18:48:26.423516587Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.427559 env[1725]: time="2023-10-02T18:48:26.427499376Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.429549 env[1725]: time="2023-10-02T18:48:26.429474845Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.435984 env[1725]: time="2023-10-02T18:48:26.435875235Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.437573 env[1725]: time="2023-10-02T18:48:26.437497006Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.441732 env[1725]: time="2023-10-02T18:48:26.441659710Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.444154 env[1725]: time="2023-10-02T18:48:26.444057282Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.464838 env[1725]: time="2023-10-02T18:48:26.464777568Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:26.467665 kubelet[2393]: W1002 18:48:26.467493 2393 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.30.161:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-161&limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:26.467665 kubelet[2393]: E1002 18:48:26.467594 2393 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.30.161:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-161&limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:26.508144 env[1725]: time="2023-10-02T18:48:26.508013803Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:48:26.508437 env[1725]: time="2023-10-02T18:48:26.508357229Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:48:26.508662 env[1725]: time="2023-10-02T18:48:26.508609136Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:48:26.509184 env[1725]: time="2023-10-02T18:48:26.509100148Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f0dfce929daa3b1b85d974c969340b96a107300b3536193dae65f93e04b087c7 pid=2469 runtime=io.containerd.runc.v2 Oct 2 18:48:26.539761 env[1725]: time="2023-10-02T18:48:26.539565412Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:48:26.540002 env[1725]: time="2023-10-02T18:48:26.539803099Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:48:26.540002 env[1725]: time="2023-10-02T18:48:26.539930487Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:48:26.540841 env[1725]: time="2023-10-02T18:48:26.540477734Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/edb78d090e7c57bd68132ecf36c5cbda00bd9f41c769e6b14f9e4336eb5f4fbc pid=2500 runtime=io.containerd.runc.v2 Oct 2 18:48:26.547329 env[1725]: time="2023-10-02T18:48:26.546666934Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:48:26.547329 env[1725]: time="2023-10-02T18:48:26.546759628Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:48:26.547329 env[1725]: time="2023-10-02T18:48:26.546788190Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:48:26.557166 env[1725]: time="2023-10-02T18:48:26.550477596Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e917cb2b52322c889abd7cc6c40d5e07c39c540317ceb25ec52518985392e888 pid=2490 runtime=io.containerd.runc.v2 Oct 2 18:48:26.557922 kubelet[2393]: E1002 18:48:26.557818 2393 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.31.30.161:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-161?timeout=10s": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:26.567895 systemd[1]: Started cri-containerd-f0dfce929daa3b1b85d974c969340b96a107300b3536193dae65f93e04b087c7.scope. Oct 2 18:48:26.597736 systemd[1]: Started cri-containerd-edb78d090e7c57bd68132ecf36c5cbda00bd9f41c769e6b14f9e4336eb5f4fbc.scope. Oct 2 18:48:26.634023 systemd[1]: Started cri-containerd-e917cb2b52322c889abd7cc6c40d5e07c39c540317ceb25ec52518985392e888.scope. Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.653000 audit: BPF prog-id=67 op=LOAD Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2469 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630646663653932396461613362316238356439373463393639333430 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2469 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630646663653932396461613362316238356439373463393639333430 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.654000 audit: BPF prog-id=68 op=LOAD Oct 2 18:48:26.654000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2469 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630646663653932396461613362316238356439373463393639333430 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit: BPF prog-id=69 op=LOAD Oct 2 18:48:26.655000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2469 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630646663653932396461613362316238356439373463393639333430 Oct 2 18:48:26.655000 audit: BPF prog-id=69 op=UNLOAD Oct 2 18:48:26.655000 audit: BPF prog-id=68 op=UNLOAD Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.655000 audit: BPF prog-id=70 op=LOAD Oct 2 18:48:26.655000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2469 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630646663653932396461613362316238356439373463393639333430 Oct 2 18:48:26.669872 kubelet[2393]: I1002 18:48:26.669327 2393 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-161" Oct 2 18:48:26.670082 kubelet[2393]: E1002 18:48:26.670051 2393 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.161:6443/api/v1/nodes\": dial tcp 172.31.30.161:6443: connect: connection refused" node="ip-172-31-30-161" Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.719000 audit: BPF prog-id=71 op=LOAD Oct 2 18:48:26.720000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.720000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2490 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539313763623262353233323263383839616264376363366334306435 Oct 2 18:48:26.721000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.721000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2490 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539313763623262353233323263383839616264376363366334306435 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.722000 audit: BPF prog-id=72 op=LOAD Oct 2 18:48:26.722000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2490 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539313763623262353233323263383839616264376363366334306435 Oct 2 18:48:26.724000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.724000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.724000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.724000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.724000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.724000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.724000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.724000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.724000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.724000 audit: BPF prog-id=73 op=LOAD Oct 2 18:48:26.724000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2490 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539313763623262353233323263383839616264376363366334306435 Oct 2 18:48:26.726000 audit: BPF prog-id=73 op=UNLOAD Oct 2 18:48:26.726000 audit: BPF prog-id=72 op=UNLOAD Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { perfmon } for pid=2532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit[2532]: AVC avc: denied { bpf } for pid=2532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.726000 audit: BPF prog-id=74 op=LOAD Oct 2 18:48:26.726000 audit[2532]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2490 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539313763623262353233323263383839616264376363366334306435 Oct 2 18:48:26.738184 kubelet[2393]: W1002 18:48:26.738035 2393 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.30.161:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:26.738184 kubelet[2393]: E1002 18:48:26.738132 2393 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.30.161:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.742000 audit: BPF prog-id=75 op=LOAD Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2500 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564623738643039306537633537626436383133326563663336633563 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2500 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564623738643039306537633537626436383133326563663336633563 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.744000 audit: BPF prog-id=76 op=LOAD Oct 2 18:48:26.744000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2500 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564623738643039306537633537626436383133326563663336633563 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit: BPF prog-id=77 op=LOAD Oct 2 18:48:26.745000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2500 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564623738643039306537633537626436383133326563663336633563 Oct 2 18:48:26.745000 audit: BPF prog-id=77 op=UNLOAD Oct 2 18:48:26.745000 audit: BPF prog-id=76 op=UNLOAD Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { perfmon } for pid=2516 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit[2516]: AVC avc: denied { bpf } for pid=2516 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.745000 audit: BPF prog-id=78 op=LOAD Oct 2 18:48:26.745000 audit[2516]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2500 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564623738643039306537633537626436383133326563663336633563 Oct 2 18:48:26.753491 env[1725]: time="2023-10-02T18:48:26.753369329Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-30-161,Uid:185b61981935ccc4d0ca03ed4aac3d44,Namespace:kube-system,Attempt:0,} returns sandbox id \"f0dfce929daa3b1b85d974c969340b96a107300b3536193dae65f93e04b087c7\"" Oct 2 18:48:26.762588 kubelet[2393]: W1002 18:48:26.762540 2393 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.30.161:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:26.762887 kubelet[2393]: E1002 18:48:26.762857 2393 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.30.161:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:26.763746 env[1725]: time="2023-10-02T18:48:26.763677610Z" level=info msg="CreateContainer within sandbox \"f0dfce929daa3b1b85d974c969340b96a107300b3536193dae65f93e04b087c7\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 18:48:26.817737 env[1725]: time="2023-10-02T18:48:26.817643389Z" level=info msg="CreateContainer within sandbox \"f0dfce929daa3b1b85d974c969340b96a107300b3536193dae65f93e04b087c7\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"0acc257815030eafb3f2839b0c9b6267b24f37b5869d6e5a62479834c1af7d03\"" Oct 2 18:48:26.818941 env[1725]: time="2023-10-02T18:48:26.818858478Z" level=info msg="StartContainer for \"0acc257815030eafb3f2839b0c9b6267b24f37b5869d6e5a62479834c1af7d03\"" Oct 2 18:48:26.837802 env[1725]: time="2023-10-02T18:48:26.837723507Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-30-161,Uid:f05ed361a410aff0f0878b118a98ee8d,Namespace:kube-system,Attempt:0,} returns sandbox id \"e917cb2b52322c889abd7cc6c40d5e07c39c540317ceb25ec52518985392e888\"" Oct 2 18:48:26.843043 env[1725]: time="2023-10-02T18:48:26.842949850Z" level=info msg="CreateContainer within sandbox \"e917cb2b52322c889abd7cc6c40d5e07c39c540317ceb25ec52518985392e888\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 18:48:26.864667 env[1725]: time="2023-10-02T18:48:26.864606352Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-161,Uid:72b690b80c494b73ad077a14da76b1a2,Namespace:kube-system,Attempt:0,} returns sandbox id \"edb78d090e7c57bd68132ecf36c5cbda00bd9f41c769e6b14f9e4336eb5f4fbc\"" Oct 2 18:48:26.869377 env[1725]: time="2023-10-02T18:48:26.869313554Z" level=info msg="CreateContainer within sandbox \"edb78d090e7c57bd68132ecf36c5cbda00bd9f41c769e6b14f9e4336eb5f4fbc\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 18:48:26.888478 env[1725]: time="2023-10-02T18:48:26.888372095Z" level=info msg="CreateContainer within sandbox \"e917cb2b52322c889abd7cc6c40d5e07c39c540317ceb25ec52518985392e888\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"54aab9e7556a590eef9b47433d23267037a349c727657fc54a22b1648d44bbf9\"" Oct 2 18:48:26.890092 env[1725]: time="2023-10-02T18:48:26.890014183Z" level=info msg="StartContainer for \"54aab9e7556a590eef9b47433d23267037a349c727657fc54a22b1648d44bbf9\"" Oct 2 18:48:26.904638 systemd[1]: Started cri-containerd-0acc257815030eafb3f2839b0c9b6267b24f37b5869d6e5a62479834c1af7d03.scope. Oct 2 18:48:26.927458 env[1725]: time="2023-10-02T18:48:26.919193122Z" level=info msg="CreateContainer within sandbox \"edb78d090e7c57bd68132ecf36c5cbda00bd9f41c769e6b14f9e4336eb5f4fbc\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"bbcae33b64bae07af1583d7d4c8180f117b13ef5677b941c4180e6dbcabc4868\"" Oct 2 18:48:26.930511 env[1725]: time="2023-10-02T18:48:26.930450232Z" level=info msg="StartContainer for \"bbcae33b64bae07af1583d7d4c8180f117b13ef5677b941c4180e6dbcabc4868\"" Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.971000 audit: BPF prog-id=79 op=LOAD Oct 2 18:48:26.973000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.973000 audit[2593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c1b38 a2=10 a3=0 items=0 ppid=2469 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061636332353738313530333065616662336632383339623063396236 Oct 2 18:48:26.973000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.973000 audit[2593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c15a0 a2=3c a3=0 items=0 ppid=2469 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061636332353738313530333065616662336632383339623063396236 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.974000 audit: BPF prog-id=80 op=LOAD Oct 2 18:48:26.974000 audit[2593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c18e0 a2=78 a3=0 items=0 ppid=2469 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061636332353738313530333065616662336632383339623063396236 Oct 2 18:48:26.975000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.975000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.975000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.975000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.975000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.975000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.975000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.975000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.975000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.975000 audit: BPF prog-id=81 op=LOAD Oct 2 18:48:26.975000 audit[2593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c1670 a2=78 a3=0 items=0 ppid=2469 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061636332353738313530333065616662336632383339623063396236 Oct 2 18:48:26.977000 audit: BPF prog-id=81 op=UNLOAD Oct 2 18:48:26.977000 audit: BPF prog-id=80 op=UNLOAD Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:26.977000 audit: BPF prog-id=82 op=LOAD Oct 2 18:48:26.977000 audit[2593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c1b40 a2=78 a3=0 items=0 ppid=2469 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:26.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061636332353738313530333065616662336632383339623063396236 Oct 2 18:48:27.025765 systemd[1]: Started cri-containerd-54aab9e7556a590eef9b47433d23267037a349c727657fc54a22b1648d44bbf9.scope. Oct 2 18:48:27.061853 systemd[1]: Started cri-containerd-bbcae33b64bae07af1583d7d4c8180f117b13ef5677b941c4180e6dbcabc4868.scope. Oct 2 18:48:27.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.089000 audit: BPF prog-id=83 op=LOAD Oct 2 18:48:27.090000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.090000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2490 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534616162396537353536613539306565663962343734333364323332 Oct 2 18:48:27.092000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.092000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2490 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534616162396537353536613539306565663962343734333364323332 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.093000 audit: BPF prog-id=84 op=LOAD Oct 2 18:48:27.093000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2490 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534616162396537353536613539306565663962343734333364323332 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit: BPF prog-id=85 op=LOAD Oct 2 18:48:27.095000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2490 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534616162396537353536613539306565663962343734333364323332 Oct 2 18:48:27.095000 audit: BPF prog-id=85 op=UNLOAD Oct 2 18:48:27.095000 audit: BPF prog-id=84 op=UNLOAD Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { perfmon } for pid=2622 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit[2622]: AVC avc: denied { bpf } for pid=2622 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.095000 audit: BPF prog-id=86 op=LOAD Oct 2 18:48:27.095000 audit[2622]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2490 pid=2622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534616162396537353536613539306565663962343734333364323332 Oct 2 18:48:27.102534 env[1725]: time="2023-10-02T18:48:27.099844233Z" level=info msg="StartContainer for \"0acc257815030eafb3f2839b0c9b6267b24f37b5869d6e5a62479834c1af7d03\" returns successfully" Oct 2 18:48:27.173867 kubelet[2393]: E1002 18:48:27.173827 2393 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.30.161:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.30.161:6443: connect: connection refused Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.182000 audit: BPF prog-id=87 op=LOAD Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2500 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636165333362363462616530376166313538336437643463383138 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2500 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636165333362363462616530376166313538336437643463383138 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit: BPF prog-id=88 op=LOAD Oct 2 18:48:27.186000 audit[2624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2500 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636165333362363462616530376166313538336437643463383138 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.186000 audit: BPF prog-id=89 op=LOAD Oct 2 18:48:27.186000 audit[2624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2500 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636165333362363462616530376166313538336437643463383138 Oct 2 18:48:27.187000 audit: BPF prog-id=89 op=UNLOAD Oct 2 18:48:27.187000 audit: BPF prog-id=88 op=UNLOAD Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { perfmon } for pid=2624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit[2624]: AVC avc: denied { bpf } for pid=2624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:27.187000 audit: BPF prog-id=90 op=LOAD Oct 2 18:48:27.187000 audit[2624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2500 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:27.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262636165333362363462616530376166313538336437643463383138 Oct 2 18:48:27.195125 env[1725]: time="2023-10-02T18:48:27.181014908Z" level=info msg="StartContainer for \"54aab9e7556a590eef9b47433d23267037a349c727657fc54a22b1648d44bbf9\" returns successfully" Oct 2 18:48:27.338842 env[1725]: time="2023-10-02T18:48:27.338771634Z" level=info msg="StartContainer for \"bbcae33b64bae07af1583d7d4c8180f117b13ef5677b941c4180e6dbcabc4868\" returns successfully" Oct 2 18:48:28.272603 kubelet[2393]: I1002 18:48:28.272562 2393 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-161" Oct 2 18:48:28.317910 update_engine[1717]: I1002 18:48:28.316480 1717 update_attempter.cc:505] Updating boot flags... Oct 2 18:48:33.028188 kernel: kauditd_printk_skb: 620 callbacks suppressed Oct 2 18:48:33.028387 kernel: audit: type=1400 audit(1696272513.016:737): avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.016000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.016000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000050ae0 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:33.045190 kernel: audit: type=1300 audit(1696272513.016:737): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000050ae0 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:33.016000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:33.060069 kernel: audit: type=1327 audit(1696272513.016:737): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:33.016000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.075664 kernel: audit: type=1400 audit(1696272513.016:738): avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.016000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400129a030 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:33.093164 kernel: audit: type=1300 audit(1696272513.016:738): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400129a030 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:33.016000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:33.111182 kernel: audit: type=1327 audit(1696272513.016:738): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:33.566000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.566000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4000e2c000 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:48:33.592584 kernel: audit: type=1400 audit(1696272513.566:739): avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.592748 kernel: audit: type=1300 audit(1696272513.566:739): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4000e2c000 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:48:33.566000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:48:33.607363 kernel: audit: type=1327 audit(1696272513.566:739): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:48:33.566000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.619499 kernel: audit: type=1400 audit(1696272513.566:740): avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.566000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400351c200 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:48:33.566000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:48:33.567000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.567000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4000e2c870 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:48:33.567000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:48:33.575000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.575000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=400294a1e0 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:48:33.575000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:48:33.575000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.575000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=40028f7980 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:48:33.575000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:48:33.579000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:33.579000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=4000f07050 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:48:33.579000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:48:33.915956 kubelet[2393]: E1002 18:48:33.915812 2393 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-30-161\" not found" node="ip-172-31-30-161" Oct 2 18:48:33.970219 kubelet[2393]: I1002 18:48:33.970174 2393 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-30-161" Oct 2 18:48:34.087116 kubelet[2393]: E1002 18:48:34.086970 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb2ed46848", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 134934088, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 134934088, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:34.136352 kubelet[2393]: I1002 18:48:34.136300 2393 apiserver.go:52] "Watching apiserver" Oct 2 18:48:34.151802 kubelet[2393]: E1002 18:48:34.151645 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb2fccd2eb", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 151214315, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 151214315, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:34.152345 kubelet[2393]: I1002 18:48:34.152178 2393 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 18:48:34.212541 kubelet[2393]: E1002 18:48:34.212240 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb338f8833", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-30-161 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214306355, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214306355, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:34.241871 kubelet[2393]: I1002 18:48:34.241769 2393 reconciler.go:41] "Reconciler: start to sync state" Oct 2 18:48:34.269519 kubelet[2393]: E1002 18:48:34.269288 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb338faf7b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-30-161 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214316411, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214316411, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:34.326504 kubelet[2393]: E1002 18:48:34.326332 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb338fc434", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-30-161 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214321716, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214321716, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:34.391222 kubelet[2393]: E1002 18:48:34.391084 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb338f8833", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-30-161 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214306355, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 256745975, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:34.451894 kubelet[2393]: E1002 18:48:34.451712 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb338faf7b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-30-161 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214316411, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 256754028, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:34.514470 kubelet[2393]: E1002 18:48:34.514148 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb338fc434", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-30-161 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214321716, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 256758996, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:34.576339 kubelet[2393]: E1002 18:48:34.576137 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb36cf424d", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 268814413, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 268814413, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:34.749099 kubelet[2393]: E1002 18:48:34.748958 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb338f8833", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-30-161 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214306355, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 461047301, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:35.148308 kubelet[2393]: E1002 18:48:35.148166 2393 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-161.178a5edb338faf7b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-161", UID:"ip-172-31-30-161", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-30-161 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-161"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 214316411, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 48, 25, 461057442, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:48:36.967341 systemd[1]: Reloading. Oct 2 18:48:37.185051 /usr/lib/systemd/system-generators/torcx-generator[2896]: time="2023-10-02T18:48:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:48:37.187198 /usr/lib/systemd/system-generators/torcx-generator[2896]: time="2023-10-02T18:48:37Z" level=info msg="torcx already run" Oct 2 18:48:37.468549 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:48:37.468802 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:48:37.522146 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:48:37.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.721000 audit: BPF prog-id=91 op=LOAD Oct 2 18:48:37.721000 audit: BPF prog-id=79 op=UNLOAD Oct 2 18:48:37.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.723000 audit: BPF prog-id=92 op=LOAD Oct 2 18:48:37.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.724000 audit: BPF prog-id=93 op=LOAD Oct 2 18:48:37.724000 audit: BPF prog-id=52 op=UNLOAD Oct 2 18:48:37.725000 audit: BPF prog-id=53 op=UNLOAD Oct 2 18:48:37.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.729000 audit: BPF prog-id=94 op=LOAD Oct 2 18:48:37.729000 audit: BPF prog-id=54 op=UNLOAD Oct 2 18:48:37.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.733000 audit: BPF prog-id=95 op=LOAD Oct 2 18:48:37.733000 audit: BPF prog-id=87 op=UNLOAD Oct 2 18:48:37.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.735000 audit: BPF prog-id=96 op=LOAD Oct 2 18:48:37.735000 audit: BPF prog-id=55 op=UNLOAD Oct 2 18:48:37.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.740000 audit: BPF prog-id=97 op=LOAD Oct 2 18:48:37.740000 audit: BPF prog-id=56 op=UNLOAD Oct 2 18:48:37.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.744000 audit: BPF prog-id=98 op=LOAD Oct 2 18:48:37.744000 audit: BPF prog-id=57 op=UNLOAD Oct 2 18:48:37.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.746000 audit: BPF prog-id=99 op=LOAD Oct 2 18:48:37.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.747000 audit: BPF prog-id=100 op=LOAD Oct 2 18:48:37.747000 audit: BPF prog-id=58 op=UNLOAD Oct 2 18:48:37.747000 audit: BPF prog-id=59 op=UNLOAD Oct 2 18:48:37.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.750000 audit: BPF prog-id=101 op=LOAD Oct 2 18:48:37.751000 audit: BPF prog-id=83 op=UNLOAD Oct 2 18:48:37.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.756000 audit: BPF prog-id=102 op=LOAD Oct 2 18:48:37.757000 audit: BPF prog-id=60 op=UNLOAD Oct 2 18:48:37.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.758000 audit: BPF prog-id=103 op=LOAD Oct 2 18:48:37.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.759000 audit: BPF prog-id=104 op=LOAD Oct 2 18:48:37.760000 audit: BPF prog-id=61 op=UNLOAD Oct 2 18:48:37.760000 audit: BPF prog-id=62 op=UNLOAD Oct 2 18:48:37.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.763000 audit: BPF prog-id=105 op=LOAD Oct 2 18:48:37.763000 audit: BPF prog-id=67 op=UNLOAD Oct 2 18:48:37.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.768000 audit: BPF prog-id=106 op=LOAD Oct 2 18:48:37.768000 audit: BPF prog-id=63 op=UNLOAD Oct 2 18:48:37.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.770000 audit: BPF prog-id=107 op=LOAD Oct 2 18:48:37.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.771000 audit: BPF prog-id=108 op=LOAD Oct 2 18:48:37.771000 audit: BPF prog-id=64 op=UNLOAD Oct 2 18:48:37.771000 audit: BPF prog-id=65 op=UNLOAD Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.772000 audit: BPF prog-id=109 op=LOAD Oct 2 18:48:37.773000 audit: BPF prog-id=66 op=UNLOAD Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.775000 audit: BPF prog-id=110 op=LOAD Oct 2 18:48:37.775000 audit: BPF prog-id=75 op=UNLOAD Oct 2 18:48:37.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:37.784000 audit: BPF prog-id=111 op=LOAD Oct 2 18:48:37.784000 audit: BPF prog-id=71 op=UNLOAD Oct 2 18:48:37.854112 kubelet[2393]: I1002 18:48:37.853811 2393 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:48:37.855632 systemd[1]: Stopping kubelet.service... Oct 2 18:48:37.873537 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 18:48:37.874039 systemd[1]: Stopped kubelet.service. Oct 2 18:48:37.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.874163 systemd[1]: kubelet.service: Consumed 1.760s CPU time. Oct 2 18:48:37.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.878024 systemd[1]: Started kubelet.service. Oct 2 18:48:38.096619 kubelet[2952]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:48:38.097433 kubelet[2952]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:48:38.098621 kubelet[2952]: I1002 18:48:38.098133 2952 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 18:48:38.102767 kubelet[2952]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:48:38.103019 kubelet[2952]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:48:38.115996 kubelet[2952]: I1002 18:48:38.115939 2952 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 18:48:38.116226 kubelet[2952]: I1002 18:48:38.116199 2952 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 18:48:38.116942 kubelet[2952]: I1002 18:48:38.116882 2952 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 18:48:38.120075 kubelet[2952]: I1002 18:48:38.120018 2952 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 18:48:38.126890 kubelet[2952]: I1002 18:48:38.126848 2952 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:48:38.132463 kubelet[2952]: W1002 18:48:38.130289 2952 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:48:38.132628 kubelet[2952]: I1002 18:48:38.132491 2952 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 18:48:38.134216 kubelet[2952]: I1002 18:48:38.133262 2952 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 18:48:38.134216 kubelet[2952]: I1002 18:48:38.133513 2952 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 18:48:38.134216 kubelet[2952]: I1002 18:48:38.133617 2952 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 18:48:38.134216 kubelet[2952]: I1002 18:48:38.133662 2952 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 18:48:38.134216 kubelet[2952]: I1002 18:48:38.133784 2952 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:48:38.146073 kubelet[2952]: I1002 18:48:38.146001 2952 kubelet.go:398] "Attempting to sync node with API server" Oct 2 18:48:38.146073 kubelet[2952]: I1002 18:48:38.146061 2952 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 18:48:38.146379 kubelet[2952]: I1002 18:48:38.146229 2952 kubelet.go:297] "Adding apiserver pod source" Oct 2 18:48:38.146379 kubelet[2952]: I1002 18:48:38.146263 2952 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 18:48:38.149212 kubelet[2952]: I1002 18:48:38.149071 2952 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 18:48:38.150678 kubelet[2952]: I1002 18:48:38.150557 2952 server.go:1186] "Started kubelet" Oct 2 18:48:38.161000 audit[2952]: AVC avc: denied { mac_admin } for pid=2952 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:38.163300 kubelet[2952]: I1002 18:48:38.163260 2952 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 18:48:38.163571 kubelet[2952]: I1002 18:48:38.163544 2952 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 18:48:38.163748 kubelet[2952]: I1002 18:48:38.163722 2952 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 18:48:38.165031 kernel: kauditd_printk_skb: 260 callbacks suppressed Oct 2 18:48:38.165147 kernel: audit: type=1400 audit(1696272518.161:991): avc: denied { mac_admin } for pid=2952 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:38.161000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:48:38.177325 kernel: audit: type=1401 audit(1696272518.161:991): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:48:38.177515 kernel: audit: type=1300 audit(1696272518.161:991): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000dd8780 a1=4000059d88 a2=4000dd8750 a3=25 items=0 ppid=1 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:38.161000 audit[2952]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000dd8780 a1=4000059d88 a2=4000dd8750 a3=25 items=0 ppid=1 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:38.186166 kubelet[2952]: I1002 18:48:38.186114 2952 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 18:48:38.187655 kubelet[2952]: I1002 18:48:38.187605 2952 server.go:451] "Adding debug handlers to kubelet server" Oct 2 18:48:38.200635 kubelet[2952]: E1002 18:48:38.200589 2952 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 18:48:38.200914 kubelet[2952]: E1002 18:48:38.200887 2952 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 18:48:38.204280 kubelet[2952]: I1002 18:48:38.204239 2952 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 18:48:38.161000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:48:38.219127 kernel: audit: type=1327 audit(1696272518.161:991): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:48:38.224331 kubelet[2952]: I1002 18:48:38.224292 2952 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 18:48:38.161000 audit[2952]: AVC avc: denied { mac_admin } for pid=2952 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:38.250331 kernel: audit: type=1400 audit(1696272518.161:992): avc: denied { mac_admin } for pid=2952 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:38.161000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:48:38.269433 kernel: audit: type=1401 audit(1696272518.161:992): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:48:38.269585 kernel: audit: type=1300 audit(1696272518.161:992): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b746c0 a1=4000059da0 a2=4000dd8810 a3=25 items=0 ppid=1 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:38.161000 audit[2952]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b746c0 a1=4000059da0 a2=4000dd8810 a3=25 items=0 ppid=1 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:38.161000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:48:38.298463 kernel: audit: type=1327 audit(1696272518.161:992): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:48:38.356898 kubelet[2952]: I1002 18:48:38.356737 2952 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-161" Oct 2 18:48:38.393045 kubelet[2952]: I1002 18:48:38.392994 2952 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-30-161" Oct 2 18:48:38.393366 kubelet[2952]: I1002 18:48:38.393336 2952 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-30-161" Oct 2 18:48:38.423781 kubelet[2952]: I1002 18:48:38.423570 2952 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 18:48:38.578658 kubelet[2952]: I1002 18:48:38.578602 2952 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 18:48:38.578658 kubelet[2952]: I1002 18:48:38.578646 2952 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 18:48:38.578900 kubelet[2952]: I1002 18:48:38.578677 2952 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:48:38.579026 kubelet[2952]: I1002 18:48:38.578985 2952 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 18:48:38.579106 kubelet[2952]: I1002 18:48:38.579027 2952 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 18:48:38.579106 kubelet[2952]: I1002 18:48:38.579045 2952 policy_none.go:49] "None policy: Start" Oct 2 18:48:38.584929 kubelet[2952]: I1002 18:48:38.584873 2952 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 18:48:38.584929 kubelet[2952]: I1002 18:48:38.584932 2952 state_mem.go:35] "Initializing new in-memory state store" Oct 2 18:48:38.585290 kubelet[2952]: I1002 18:48:38.585242 2952 state_mem.go:75] "Updated machine memory state" Oct 2 18:48:38.596127 kubelet[2952]: I1002 18:48:38.596057 2952 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 18:48:38.596127 kubelet[2952]: I1002 18:48:38.596108 2952 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 18:48:38.596387 kubelet[2952]: I1002 18:48:38.596142 2952 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 18:48:38.596387 kubelet[2952]: E1002 18:48:38.596240 2952 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 18:48:38.609000 audit[2952]: AVC avc: denied { mac_admin } for pid=2952 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:38.612997 kubelet[2952]: I1002 18:48:38.611291 2952 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 18:48:38.612997 kubelet[2952]: I1002 18:48:38.611531 2952 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 18:48:38.612997 kubelet[2952]: I1002 18:48:38.612358 2952 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 18:48:38.609000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:48:38.625474 kernel: audit: type=1400 audit(1696272518.609:993): avc: denied { mac_admin } for pid=2952 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:38.625636 kernel: audit: type=1401 audit(1696272518.609:993): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:48:38.609000 audit[2952]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4001148870 a1=4000059710 a2=4001148840 a3=25 items=0 ppid=1 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:38.609000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:48:38.697086 kubelet[2952]: I1002 18:48:38.697031 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:38.697466 kubelet[2952]: I1002 18:48:38.697432 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:38.697746 kubelet[2952]: I1002 18:48:38.697714 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:38.739251 kubelet[2952]: E1002 18:48:38.739210 2952 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-30-161\" already exists" pod="kube-system/kube-apiserver-ip-172-31-30-161" Oct 2 18:48:38.742040 kubelet[2952]: E1002 18:48:38.741995 2952 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-30-161\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:38.751147 kubelet[2952]: I1002 18:48:38.751099 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/185b61981935ccc4d0ca03ed4aac3d44-ca-certs\") pod \"kube-apiserver-ip-172-31-30-161\" (UID: \"185b61981935ccc4d0ca03ed4aac3d44\") " pod="kube-system/kube-apiserver-ip-172-31-30-161" Oct 2 18:48:38.751473 kubelet[2952]: I1002 18:48:38.751393 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/185b61981935ccc4d0ca03ed4aac3d44-k8s-certs\") pod \"kube-apiserver-ip-172-31-30-161\" (UID: \"185b61981935ccc4d0ca03ed4aac3d44\") " pod="kube-system/kube-apiserver-ip-172-31-30-161" Oct 2 18:48:38.751811 kubelet[2952]: I1002 18:48:38.751782 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-kubeconfig\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:38.752055 kubelet[2952]: I1002 18:48:38.752011 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:38.752254 kubelet[2952]: I1002 18:48:38.752218 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/72b690b80c494b73ad077a14da76b1a2-kubeconfig\") pod \"kube-scheduler-ip-172-31-30-161\" (UID: \"72b690b80c494b73ad077a14da76b1a2\") " pod="kube-system/kube-scheduler-ip-172-31-30-161" Oct 2 18:48:38.752599 kubelet[2952]: I1002 18:48:38.752563 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/185b61981935ccc4d0ca03ed4aac3d44-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-30-161\" (UID: \"185b61981935ccc4d0ca03ed4aac3d44\") " pod="kube-system/kube-apiserver-ip-172-31-30-161" Oct 2 18:48:38.753080 kubelet[2952]: I1002 18:48:38.752948 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-ca-certs\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:38.753372 kubelet[2952]: I1002 18:48:38.753344 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:38.753727 kubelet[2952]: I1002 18:48:38.753674 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f05ed361a410aff0f0878b118a98ee8d-k8s-certs\") pod \"kube-controller-manager-ip-172-31-30-161\" (UID: \"f05ed361a410aff0f0878b118a98ee8d\") " pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:39.160185 kubelet[2952]: I1002 18:48:39.160133 2952 apiserver.go:52] "Watching apiserver" Oct 2 18:48:39.225045 kubelet[2952]: I1002 18:48:39.224990 2952 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 18:48:39.258548 kubelet[2952]: I1002 18:48:39.258495 2952 reconciler.go:41] "Reconciler: start to sync state" Oct 2 18:48:39.647881 kubelet[2952]: E1002 18:48:39.647827 2952 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-30-161\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-30-161" Oct 2 18:48:39.662855 kubelet[2952]: E1002 18:48:39.662812 2952 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-30-161\" already exists" pod="kube-system/kube-scheduler-ip-172-31-30-161" Oct 2 18:48:39.956288 kubelet[2952]: E1002 18:48:39.956132 2952 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-30-161\" already exists" pod="kube-system/kube-apiserver-ip-172-31-30-161" Oct 2 18:48:40.607337 kubelet[2952]: I1002 18:48:40.607291 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-30-161" podStartSLOduration=2.607151998 pod.CreationTimestamp="2023-10-02 18:48:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:48:40.206801639 +0000 UTC m=+2.299767209" watchObservedRunningTime="2023-10-02 18:48:40.607151998 +0000 UTC m=+2.700117556" Oct 2 18:48:40.608216 kubelet[2952]: I1002 18:48:40.608175 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-30-161" podStartSLOduration=5.608119855 pod.CreationTimestamp="2023-10-02 18:48:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:48:40.606312558 +0000 UTC m=+2.699278116" watchObservedRunningTime="2023-10-02 18:48:40.608119855 +0000 UTC m=+2.701085413" Oct 2 18:48:41.395880 kubelet[2952]: I1002 18:48:41.395834 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-30-161" podStartSLOduration=5.395772815 pod.CreationTimestamp="2023-10-02 18:48:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:48:41.025363442 +0000 UTC m=+3.118329012" watchObservedRunningTime="2023-10-02 18:48:41.395772815 +0000 UTC m=+3.488738385" Oct 2 18:48:45.466537 sudo[1985]: pam_unix(sudo:session): session closed for user root Oct 2 18:48:45.465000 audit[1985]: USER_END pid=1985 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:48:45.469424 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 18:48:45.469681 kernel: audit: type=1106 audit(1696272525.465:994): pid=1985 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:48:45.465000 audit[1985]: CRED_DISP pid=1985 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:48:45.487200 kernel: audit: type=1104 audit(1696272525.465:995): pid=1985 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:48:45.493280 sshd[1982]: pam_unix(sshd:session): session closed for user core Oct 2 18:48:45.494000 audit[1982]: USER_END pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:48:45.500678 systemd-logind[1716]: Session 7 logged out. Waiting for processes to exit. Oct 2 18:48:45.502457 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 18:48:45.502848 systemd[1]: session-7.scope: Consumed 9.435s CPU time. Oct 2 18:48:45.503849 systemd[1]: sshd@6-172.31.30.161:22-139.178.89.65:41484.service: Deactivated successfully. Oct 2 18:48:45.495000 audit[1982]: CRED_DISP pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:48:45.507981 systemd-logind[1716]: Removed session 7. Oct 2 18:48:45.518001 kernel: audit: type=1106 audit(1696272525.494:996): pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:48:45.518178 kernel: audit: type=1104 audit(1696272525.495:997): pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:48:45.518248 kernel: audit: type=1131 audit(1696272525.501:998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.161:22-139.178.89.65:41484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:45.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.161:22-139.178.89.65:41484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:46.576000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 18:48:46.576000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d40000 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:46.601206 kernel: audit: type=1400 audit(1696272526.576:999): avc: denied { watch } for pid=2648 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 18:48:46.601373 kernel: audit: type=1300 audit(1696272526.576:999): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d40000 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:46.576000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:46.612808 kernel: audit: type=1327 audit(1696272526.576:999): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:46.779000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:46.779000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000e2e9e0 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:46.803578 kernel: audit: type=1400 audit(1696272526.779:1000): avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:46.803747 kernel: audit: type=1300 audit(1696272526.779:1000): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000e2e9e0 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:46.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:46.779000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:46.779000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e2eb20 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:46.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:46.785000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:46.785000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e8bc00 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:46.785000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:46.785000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:48:46.785000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e8bc40 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:48:46.785000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:48:50.889845 kubelet[2952]: I1002 18:48:50.889803 2952 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 18:48:50.891462 env[1725]: time="2023-10-02T18:48:50.891374766Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 18:48:50.892930 kubelet[2952]: I1002 18:48:50.892850 2952 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 18:48:51.563344 kubelet[2952]: I1002 18:48:51.563288 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:51.575366 systemd[1]: Created slice kubepods-besteffort-pod620349b1_7c82_4b8a_9537_b326461e83a7.slice. Oct 2 18:48:51.590140 kubelet[2952]: W1002 18:48:51.590071 2952 reflector.go:424] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:48:51.590341 kubelet[2952]: E1002 18:48:51.590158 2952 reflector.go:140] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:48:51.590590 kubelet[2952]: W1002 18:48:51.590377 2952 reflector.go:424] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:48:51.590590 kubelet[2952]: E1002 18:48:51.590466 2952 reflector.go:140] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:48:51.650691 kubelet[2952]: I1002 18:48:51.650551 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n6xj7\" (UniqueName: \"kubernetes.io/projected/620349b1-7c82-4b8a-9537-b326461e83a7-kube-api-access-n6xj7\") pod \"kube-proxy-xpm85\" (UID: \"620349b1-7c82-4b8a-9537-b326461e83a7\") " pod="kube-system/kube-proxy-xpm85" Oct 2 18:48:51.650901 kubelet[2952]: I1002 18:48:51.650787 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/620349b1-7c82-4b8a-9537-b326461e83a7-kube-proxy\") pod \"kube-proxy-xpm85\" (UID: \"620349b1-7c82-4b8a-9537-b326461e83a7\") " pod="kube-system/kube-proxy-xpm85" Oct 2 18:48:51.650990 kubelet[2952]: I1002 18:48:51.650910 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/620349b1-7c82-4b8a-9537-b326461e83a7-xtables-lock\") pod \"kube-proxy-xpm85\" (UID: \"620349b1-7c82-4b8a-9537-b326461e83a7\") " pod="kube-system/kube-proxy-xpm85" Oct 2 18:48:51.651065 kubelet[2952]: I1002 18:48:51.651003 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/620349b1-7c82-4b8a-9537-b326461e83a7-lib-modules\") pod \"kube-proxy-xpm85\" (UID: \"620349b1-7c82-4b8a-9537-b326461e83a7\") " pod="kube-system/kube-proxy-xpm85" Oct 2 18:48:51.779842 kubelet[2952]: I1002 18:48:51.779739 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:51.793298 systemd[1]: Created slice kubepods-besteffort-podfb1ec50f_ee30_44d4_b4db_a75033494f37.slice. Oct 2 18:48:51.802651 kubelet[2952]: W1002 18:48:51.802580 2952 reflector.go:424] object-"tigera-operator"/"kubernetes-services-endpoint": failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:48:51.802651 kubelet[2952]: E1002 18:48:51.802640 2952 reflector.go:140] object-"tigera-operator"/"kubernetes-services-endpoint": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:48:51.852934 kubelet[2952]: I1002 18:48:51.852747 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/fb1ec50f-ee30-44d4-b4db-a75033494f37-var-lib-calico\") pod \"tigera-operator-54b47459dd-sd9v6\" (UID: \"fb1ec50f-ee30-44d4-b4db-a75033494f37\") " pod="tigera-operator/tigera-operator-54b47459dd-sd9v6" Oct 2 18:48:51.852934 kubelet[2952]: I1002 18:48:51.852860 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-98j77\" (UniqueName: \"kubernetes.io/projected/fb1ec50f-ee30-44d4-b4db-a75033494f37-kube-api-access-98j77\") pod \"tigera-operator-54b47459dd-sd9v6\" (UID: \"fb1ec50f-ee30-44d4-b4db-a75033494f37\") " pod="tigera-operator/tigera-operator-54b47459dd-sd9v6" Oct 2 18:48:52.099666 env[1725]: time="2023-10-02T18:48:52.099588135Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-54b47459dd-sd9v6,Uid:fb1ec50f-ee30-44d4-b4db-a75033494f37,Namespace:tigera-operator,Attempt:0,}" Oct 2 18:48:52.150602 env[1725]: time="2023-10-02T18:48:52.150295990Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:48:52.150805 env[1725]: time="2023-10-02T18:48:52.150384564Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:48:52.150805 env[1725]: time="2023-10-02T18:48:52.150513711Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:48:52.152534 env[1725]: time="2023-10-02T18:48:52.151912679Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f9a18569d30acb09bd7d7076810fe969996806834074dcdd1d90b0a5cd4b292e pid=3062 runtime=io.containerd.runc.v2 Oct 2 18:48:52.199083 systemd[1]: Started cri-containerd-f9a18569d30acb09bd7d7076810fe969996806834074dcdd1d90b0a5cd4b292e.scope. Oct 2 18:48:52.210874 systemd[1]: run-containerd-runc-k8s.io-f9a18569d30acb09bd7d7076810fe969996806834074dcdd1d90b0a5cd4b292e-runc.QuFTvM.mount: Deactivated successfully. Oct 2 18:48:52.269275 kernel: kauditd_printk_skb: 10 callbacks suppressed Oct 2 18:48:52.269396 kernel: audit: type=1400 audit(1696272532.257:1004): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.277462 kernel: audit: type=1400 audit(1696272532.257:1005): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.285797 kernel: audit: type=1400 audit(1696272532.257:1006): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.294227 kernel: audit: type=1400 audit(1696272532.257:1007): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.302553 kernel: audit: type=1400 audit(1696272532.257:1008): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.310859 kernel: audit: type=1400 audit(1696272532.257:1009): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.319102 kernel: audit: type=1400 audit(1696272532.257:1010): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.327597 kernel: audit: type=1400 audit(1696272532.257:1011): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.336148 kernel: audit: type=1400 audit(1696272532.257:1012): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.347798 kernel: audit: type=1400 audit(1696272532.257:1013): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.257000 audit: BPF prog-id=112 op=LOAD Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3062 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639613138353639643330616362303962643764373037363831306665 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3062 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639613138353639643330616362303962643764373037363831306665 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.267000 audit: BPF prog-id=113 op=LOAD Oct 2 18:48:52.267000 audit[3072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3062 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639613138353639643330616362303962643764373037363831306665 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit: BPF prog-id=114 op=LOAD Oct 2 18:48:52.268000 audit[3072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3062 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639613138353639643330616362303962643764373037363831306665 Oct 2 18:48:52.268000 audit: BPF prog-id=114 op=UNLOAD Oct 2 18:48:52.268000 audit: BPF prog-id=113 op=UNLOAD Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { perfmon } for pid=3072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit[3072]: AVC avc: denied { bpf } for pid=3072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.268000 audit: BPF prog-id=115 op=LOAD Oct 2 18:48:52.268000 audit[3072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3062 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639613138353639643330616362303962643764373037363831306665 Oct 2 18:48:52.373976 env[1725]: time="2023-10-02T18:48:52.373873867Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-54b47459dd-sd9v6,Uid:fb1ec50f-ee30-44d4-b4db-a75033494f37,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"f9a18569d30acb09bd7d7076810fe969996806834074dcdd1d90b0a5cd4b292e\"" Oct 2 18:48:52.379869 env[1725]: time="2023-10-02T18:48:52.379213425Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 18:48:52.788281 env[1725]: time="2023-10-02T18:48:52.787724841Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xpm85,Uid:620349b1-7c82-4b8a-9537-b326461e83a7,Namespace:kube-system,Attempt:0,}" Oct 2 18:48:52.833329 env[1725]: time="2023-10-02T18:48:52.833204272Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:48:52.833680 env[1725]: time="2023-10-02T18:48:52.833606353Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:48:52.833879 env[1725]: time="2023-10-02T18:48:52.833819646Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:48:52.834752 env[1725]: time="2023-10-02T18:48:52.834627276Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/87286197253379a62dc27ab67a49f3efff85eb8f3752dfa4ce2ba7d2e8f6bb8e pid=3103 runtime=io.containerd.runc.v2 Oct 2 18:48:52.867890 systemd[1]: Started cri-containerd-87286197253379a62dc27ab67a49f3efff85eb8f3752dfa4ce2ba7d2e8f6bb8e.scope. Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.920000 audit: BPF prog-id=116 op=LOAD Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3103 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837323836313937323533333739613632646332376162363761343966 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3103 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837323836313937323533333739613632646332376162363761343966 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit: BPF prog-id=117 op=LOAD Oct 2 18:48:52.921000 audit[3112]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3103 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837323836313937323533333739613632646332376162363761343966 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.921000 audit: BPF prog-id=118 op=LOAD Oct 2 18:48:52.921000 audit[3112]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3103 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837323836313937323533333739613632646332376162363761343966 Oct 2 18:48:52.921000 audit: BPF prog-id=118 op=UNLOAD Oct 2 18:48:52.921000 audit: BPF prog-id=117 op=UNLOAD Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:52.922000 audit: BPF prog-id=119 op=LOAD Oct 2 18:48:52.922000 audit[3112]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3103 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:52.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837323836313937323533333739613632646332376162363761343966 Oct 2 18:48:52.959236 env[1725]: time="2023-10-02T18:48:52.959160638Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xpm85,Uid:620349b1-7c82-4b8a-9537-b326461e83a7,Namespace:kube-system,Attempt:0,} returns sandbox id \"87286197253379a62dc27ab67a49f3efff85eb8f3752dfa4ce2ba7d2e8f6bb8e\"" Oct 2 18:48:52.969062 env[1725]: time="2023-10-02T18:48:52.968994515Z" level=info msg="CreateContainer within sandbox \"87286197253379a62dc27ab67a49f3efff85eb8f3752dfa4ce2ba7d2e8f6bb8e\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 18:48:53.004627 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount371654777.mount: Deactivated successfully. Oct 2 18:48:53.015796 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2436492320.mount: Deactivated successfully. Oct 2 18:48:53.031612 env[1725]: time="2023-10-02T18:48:53.031499582Z" level=info msg="CreateContainer within sandbox \"87286197253379a62dc27ab67a49f3efff85eb8f3752dfa4ce2ba7d2e8f6bb8e\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"f84f44d652c592bd883f2588e53043a156cd36a4dd4393e39b06ec1cf5d46b1e\"" Oct 2 18:48:53.035028 env[1725]: time="2023-10-02T18:48:53.034970575Z" level=info msg="StartContainer for \"f84f44d652c592bd883f2588e53043a156cd36a4dd4393e39b06ec1cf5d46b1e\"" Oct 2 18:48:53.091770 systemd[1]: Started cri-containerd-f84f44d652c592bd883f2588e53043a156cd36a4dd4393e39b06ec1cf5d46b1e.scope. Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3103 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638346634346436353263353932626438383366323538386535333034 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit: BPF prog-id=120 op=LOAD Oct 2 18:48:53.157000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3103 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638346634346436353263353932626438383366323538386535333034 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit: BPF prog-id=121 op=LOAD Oct 2 18:48:53.157000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3103 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638346634346436353263353932626438383366323538386535333034 Oct 2 18:48:53.157000 audit: BPF prog-id=121 op=UNLOAD Oct 2 18:48:53.157000 audit: BPF prog-id=120 op=UNLOAD Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:53.157000 audit: BPF prog-id=122 op=LOAD Oct 2 18:48:53.157000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3103 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638346634346436353263353932626438383366323538386535333034 Oct 2 18:48:53.204175 env[1725]: time="2023-10-02T18:48:53.204088878Z" level=info msg="StartContainer for \"f84f44d652c592bd883f2588e53043a156cd36a4dd4393e39b06ec1cf5d46b1e\" returns successfully" Oct 2 18:48:53.407000 audit[3193]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=3193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.407000 audit[3193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc7c1bfd0 a2=0 a3=ffffa88dc6c0 items=0 ppid=3156 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.407000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:48:53.418000 audit[3197]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_chain pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.418000 audit[3197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd3077f0 a2=0 a3=ffff878436c0 items=0 ppid=3156 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.418000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:48:53.420000 audit[3194]: NETFILTER_CFG table=mangle:61 family=10 entries=1 op=nft_register_chain pid=3194 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.420000 audit[3194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe98532a0 a2=0 a3=ffff9bb266c0 items=0 ppid=3156 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:48:53.422000 audit[3198]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_chain pid=3198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.422000 audit[3198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcac9bdf0 a2=0 a3=ffff91d9b6c0 items=0 ppid=3156 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.422000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:48:53.425000 audit[3199]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=3199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.425000 audit[3199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed7fe8e0 a2=0 a3=ffff9218f6c0 items=0 ppid=3156 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:48:53.435000 audit[3200]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=3200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.435000 audit[3200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcec79520 a2=0 a3=ffff901196c0 items=0 ppid=3156 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.435000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:48:53.499000 audit[3201]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=3201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.499000 audit[3201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffb6555b0 a2=0 a3=ffffb09546c0 items=0 ppid=3156 pid=3201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.499000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:48:53.509000 audit[3203]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=3203 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.509000 audit[3203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff4ba1aa0 a2=0 a3=ffffad1f46c0 items=0 ppid=3156 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.509000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 18:48:53.524000 audit[3206]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=3206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.524000 audit[3206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffeb9df640 a2=0 a3=ffffa8aec6c0 items=0 ppid=3156 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.524000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 18:48:53.529000 audit[3207]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=3207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.529000 audit[3207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdaf3ff00 a2=0 a3=ffff8bb286c0 items=0 ppid=3156 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.529000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:48:53.545000 audit[3209]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=3209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.545000 audit[3209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff96f9e90 a2=0 a3=ffffa0c4d6c0 items=0 ppid=3156 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.545000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:48:53.550000 audit[3210]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=3210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.550000 audit[3210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe28cbd10 a2=0 a3=ffffb5bea6c0 items=0 ppid=3156 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.550000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:48:53.560000 audit[3212]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=3212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.560000 audit[3212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff1e57c80 a2=0 a3=ffffb7dcc6c0 items=0 ppid=3156 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.560000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:48:53.575000 audit[3215]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=3215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.575000 audit[3215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffce6eb070 a2=0 a3=ffff8fdfb6c0 items=0 ppid=3156 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.575000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 18:48:53.579000 audit[3216]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=3216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.579000 audit[3216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd00bb7b0 a2=0 a3=ffff942f56c0 items=0 ppid=3156 pid=3216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.579000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:48:53.588000 audit[3218]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=3218 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.588000 audit[3218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc6d594a0 a2=0 a3=ffffbdc406c0 items=0 ppid=3156 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:48:53.592000 audit[3219]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=3219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.592000 audit[3219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffb7daa90 a2=0 a3=ffff964966c0 items=0 ppid=3156 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.592000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:48:53.604000 audit[3221]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.604000 audit[3221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe1ac6df0 a2=0 a3=ffffabd346c0 items=0 ppid=3156 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.604000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:48:53.617000 audit[3224]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=3224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.617000 audit[3224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe8664170 a2=0 a3=ffffa9b416c0 items=0 ppid=3156 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.617000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:48:53.633000 audit[3227]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.633000 audit[3227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe282b350 a2=0 a3=ffff86dec6c0 items=0 ppid=3156 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.633000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:48:53.638000 audit[3228]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=3228 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.638000 audit[3228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffda84f400 a2=0 a3=ffffa159a6c0 items=0 ppid=3156 pid=3228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.638000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:48:53.650000 audit[3230]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=3230 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.650000 audit[3230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffffdb9cff0 a2=0 a3=ffffab4c96c0 items=0 ppid=3156 pid=3230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:48:53.666000 audit[3233]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=3233 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:48:53.666000 audit[3233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffc4f48a0 a2=0 a3=ffff9b7586c0 items=0 ppid=3156 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.666000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:48:53.757000 audit[3237]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=3237 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:53.757000 audit[3237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffd04d26a0 a2=0 a3=ffffaaca66c0 items=0 ppid=3156 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.757000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:53.775000 audit[3237]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=3237 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:53.775000 audit[3237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffd04d26a0 a2=0 a3=ffffaaca66c0 items=0 ppid=3156 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.775000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:53.786000 audit[3242]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.786000 audit[3242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd9f19ed0 a2=0 a3=ffff9d5896c0 items=0 ppid=3156 pid=3242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.786000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:48:53.798000 audit[3244]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.798000 audit[3244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd65a4ab0 a2=0 a3=ffffaede36c0 items=0 ppid=3156 pid=3244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.798000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 18:48:53.811000 audit[3247]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.811000 audit[3247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffca32ab30 a2=0 a3=ffffa22456c0 items=0 ppid=3156 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.811000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 18:48:53.815000 audit[3248]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.815000 audit[3248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcac8faf0 a2=0 a3=ffffa5db96c0 items=0 ppid=3156 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.815000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:48:53.831000 audit[3250]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3250 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.831000 audit[3250]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffea70d590 a2=0 a3=ffffa70026c0 items=0 ppid=3156 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.831000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:48:53.835000 audit[3251]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.835000 audit[3251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcdb3be00 a2=0 a3=ffff896876c0 items=0 ppid=3156 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.835000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:48:53.847000 audit[3253]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.847000 audit[3253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff7f0d6b0 a2=0 a3=ffffb3ee36c0 items=0 ppid=3156 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.847000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 18:48:53.865000 audit[3256]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.865000 audit[3256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff6f17bb0 a2=0 a3=ffff9d5c76c0 items=0 ppid=3156 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.865000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:48:53.869000 audit[3257]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.869000 audit[3257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6cfa7c0 a2=0 a3=ffff8aa926c0 items=0 ppid=3156 pid=3257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.869000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:48:53.881000 audit[3259]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3259 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.881000 audit[3259]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffce4ab1a0 a2=0 a3=ffffb395c6c0 items=0 ppid=3156 pid=3259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.881000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:48:53.887000 audit[3260]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.887000 audit[3260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd15a0920 a2=0 a3=ffffb1e5a6c0 items=0 ppid=3156 pid=3260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.887000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:48:53.909000 audit[3262]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.909000 audit[3262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd47e4530 a2=0 a3=ffff830466c0 items=0 ppid=3156 pid=3262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.909000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:48:53.935000 audit[3265]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3265 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.935000 audit[3265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffda2f3200 a2=0 a3=ffffb31eb6c0 items=0 ppid=3156 pid=3265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.935000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:48:53.970000 audit[3268]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.970000 audit[3268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcebf0d40 a2=0 a3=ffff8d7bf6c0 items=0 ppid=3156 pid=3268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.970000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 18:48:53.986000 audit[3269]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:53.986000 audit[3269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffe79d850 a2=0 a3=ffffb5f356c0 items=0 ppid=3156 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.986000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:48:54.027000 audit[3271]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3271 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:54.027000 audit[3271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffffdecb260 a2=0 a3=ffff844b16c0 items=0 ppid=3156 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:54.027000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:48:54.055000 audit[3274]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3274 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:48:54.055000 audit[3274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffda453f90 a2=0 a3=ffff912726c0 items=0 ppid=3156 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:54.055000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:48:54.103000 audit[3278]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:48:54.103000 audit[3278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc4276500 a2=0 a3=ffff81a616c0 items=0 ppid=3156 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:54.103000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:54.106000 audit[3278]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:48:54.106000 audit[3278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffc4276500 a2=0 a3=ffff81a616c0 items=0 ppid=3156 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:54.106000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:55.067437 env[1725]: time="2023-10-02T18:48:55.067317352Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:55.071590 env[1725]: time="2023-10-02T18:48:55.071517117Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2bfa083ce51f1c757f20693cfea8ad121e2748f96a90fef52f087057eac59214,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:55.076276 env[1725]: time="2023-10-02T18:48:55.076204597Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:55.080077 env[1725]: time="2023-10-02T18:48:55.080017005Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:48:55.081704 env[1725]: time="2023-10-02T18:48:55.081643220Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:2bfa083ce51f1c757f20693cfea8ad121e2748f96a90fef52f087057eac59214\"" Oct 2 18:48:55.087455 env[1725]: time="2023-10-02T18:48:55.087290804Z" level=info msg="CreateContainer within sandbox \"f9a18569d30acb09bd7d7076810fe969996806834074dcdd1d90b0a5cd4b292e\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 18:48:55.108585 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1402294592.mount: Deactivated successfully. Oct 2 18:48:55.121387 env[1725]: time="2023-10-02T18:48:55.121290333Z" level=info msg="CreateContainer within sandbox \"f9a18569d30acb09bd7d7076810fe969996806834074dcdd1d90b0a5cd4b292e\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"cfd184b5a07a76f45de2d55fbca7b663704c70d0cf7ce09cdb1400e371e2fc0e\"" Oct 2 18:48:55.123931 env[1725]: time="2023-10-02T18:48:55.123859503Z" level=info msg="StartContainer for \"cfd184b5a07a76f45de2d55fbca7b663704c70d0cf7ce09cdb1400e371e2fc0e\"" Oct 2 18:48:55.182795 systemd[1]: Started cri-containerd-cfd184b5a07a76f45de2d55fbca7b663704c70d0cf7ce09cdb1400e371e2fc0e.scope. Oct 2 18:48:55.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.246000 audit: BPF prog-id=123 op=LOAD Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3062 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:55.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366643138346235613037613736663435646532643535666263613762 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3062 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:55.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366643138346235613037613736663435646532643535666263613762 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.247000 audit: BPF prog-id=124 op=LOAD Oct 2 18:48:55.247000 audit[3287]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3062 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:55.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366643138346235613037613736663435646532643535666263613762 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit: BPF prog-id=125 op=LOAD Oct 2 18:48:55.248000 audit[3287]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3062 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:55.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366643138346235613037613736663435646532643535666263613762 Oct 2 18:48:55.248000 audit: BPF prog-id=125 op=UNLOAD Oct 2 18:48:55.248000 audit: BPF prog-id=124 op=UNLOAD Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { perfmon } for pid=3287 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit[3287]: AVC avc: denied { bpf } for pid=3287 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:55.248000 audit: BPF prog-id=126 op=LOAD Oct 2 18:48:55.248000 audit[3287]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3062 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:55.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366643138346235613037613736663435646532643535666263613762 Oct 2 18:48:55.289030 env[1725]: time="2023-10-02T18:48:55.288918361Z" level=info msg="StartContainer for \"cfd184b5a07a76f45de2d55fbca7b663704c70d0cf7ce09cdb1400e371e2fc0e\" returns successfully" Oct 2 18:48:55.703076 kubelet[2952]: I1002 18:48:55.702984 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-xpm85" podStartSLOduration=4.70290037 pod.CreationTimestamp="2023-10-02 18:48:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:48:53.703969586 +0000 UTC m=+15.796935144" watchObservedRunningTime="2023-10-02 18:48:55.70290037 +0000 UTC m=+17.795865928" Oct 2 18:48:56.101223 systemd[1]: run-containerd-runc-k8s.io-cfd184b5a07a76f45de2d55fbca7b663704c70d0cf7ce09cdb1400e371e2fc0e-runc.oFWPDA.mount: Deactivated successfully. Oct 2 18:48:59.057573 kernel: kauditd_printk_skb: 336 callbacks suppressed Oct 2 18:48:59.057705 kernel: audit: type=1325 audit(1696272539.053:1108): table=filter:103 family=2 entries=13 op=nft_register_rule pid=3345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:59.053000 audit[3345]: NETFILTER_CFG table=filter:103 family=2 entries=13 op=nft_register_rule pid=3345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:59.053000 audit[3345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=fffff8f917a0 a2=0 a3=ffffa20fd6c0 items=0 ppid=3156 pid=3345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.053000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:59.076520 kernel: audit: type=1300 audit(1696272539.053:1108): arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=fffff8f917a0 a2=0 a3=ffffa20fd6c0 items=0 ppid=3156 pid=3345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.055000 audit[3345]: NETFILTER_CFG table=nat:104 family=2 entries=20 op=nft_register_rule pid=3345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:59.083590 kernel: audit: type=1327 audit(1696272539.053:1108): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:59.055000 audit[3345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff8f917a0 a2=0 a3=ffffa20fd6c0 items=0 ppid=3156 pid=3345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.104397 kernel: audit: type=1325 audit(1696272539.055:1109): table=nat:104 family=2 entries=20 op=nft_register_rule pid=3345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:59.104560 kernel: audit: type=1300 audit(1696272539.055:1109): arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff8f917a0 a2=0 a3=ffffa20fd6c0 items=0 ppid=3156 pid=3345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.055000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:59.111081 kernel: audit: type=1327 audit(1696272539.055:1109): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:59.152592 kubelet[2952]: I1002 18:48:59.152494 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-54b47459dd-sd9v6" podStartSLOduration=-9.22337202870243e+09 pod.CreationTimestamp="2023-10-02 18:48:51 +0000 UTC" firstStartedPulling="2023-10-02 18:48:52.376392401 +0000 UTC m=+14.469357947" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:48:55.704651567 +0000 UTC m=+17.797617125" watchObservedRunningTime="2023-10-02 18:48:59.152344741 +0000 UTC m=+21.245310323" Oct 2 18:48:59.153271 kubelet[2952]: I1002 18:48:59.152848 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:59.165028 systemd[1]: Created slice kubepods-besteffort-pod3dbf4489_3940_4a63_903c_cd1652ae5422.slice. Oct 2 18:48:59.218255 kubelet[2952]: I1002 18:48:59.218155 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5ksws\" (UniqueName: \"kubernetes.io/projected/3dbf4489-3940-4a63-903c-cd1652ae5422-kube-api-access-5ksws\") pod \"calico-typha-df647db78-vfbfp\" (UID: \"3dbf4489-3940-4a63-903c-cd1652ae5422\") " pod="calico-system/calico-typha-df647db78-vfbfp" Oct 2 18:48:59.218455 kubelet[2952]: I1002 18:48:59.218302 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/3dbf4489-3940-4a63-903c-cd1652ae5422-typha-certs\") pod \"calico-typha-df647db78-vfbfp\" (UID: \"3dbf4489-3940-4a63-903c-cd1652ae5422\") " pod="calico-system/calico-typha-df647db78-vfbfp" Oct 2 18:48:59.218455 kubelet[2952]: I1002 18:48:59.218389 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3dbf4489-3940-4a63-903c-cd1652ae5422-tigera-ca-bundle\") pod \"calico-typha-df647db78-vfbfp\" (UID: \"3dbf4489-3940-4a63-903c-cd1652ae5422\") " pod="calico-system/calico-typha-df647db78-vfbfp" Oct 2 18:48:59.302884 kubelet[2952]: I1002 18:48:59.302804 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:48:59.314554 systemd[1]: Created slice kubepods-besteffort-podc5fb377b_9c75_4a00_8488_69920882c91e.slice. Oct 2 18:48:59.419723 kubelet[2952]: I1002 18:48:59.419647 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/c5fb377b-9c75-4a00-8488-69920882c91e-var-run-calico\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.419723 kubelet[2952]: I1002 18:48:59.419730 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/c5fb377b-9c75-4a00-8488-69920882c91e-node-certs\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.419955 kubelet[2952]: I1002 18:48:59.419781 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c5fb377b-9c75-4a00-8488-69920882c91e-var-lib-calico\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.419955 kubelet[2952]: I1002 18:48:59.419831 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/c5fb377b-9c75-4a00-8488-69920882c91e-cni-log-dir\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.419955 kubelet[2952]: I1002 18:48:59.419926 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c5fb377b-9c75-4a00-8488-69920882c91e-xtables-lock\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.420191 kubelet[2952]: I1002 18:48:59.419977 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/c5fb377b-9c75-4a00-8488-69920882c91e-cni-net-dir\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.420191 kubelet[2952]: I1002 18:48:59.420036 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/c5fb377b-9c75-4a00-8488-69920882c91e-flexvol-driver-host\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.420191 kubelet[2952]: I1002 18:48:59.420082 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-44bq6\" (UniqueName: \"kubernetes.io/projected/c5fb377b-9c75-4a00-8488-69920882c91e-kube-api-access-44bq6\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.420191 kubelet[2952]: I1002 18:48:59.420128 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/c5fb377b-9c75-4a00-8488-69920882c91e-cni-bin-dir\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.420191 kubelet[2952]: I1002 18:48:59.420174 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c5fb377b-9c75-4a00-8488-69920882c91e-tigera-ca-bundle\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.420539 kubelet[2952]: I1002 18:48:59.420228 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c5fb377b-9c75-4a00-8488-69920882c91e-lib-modules\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.420539 kubelet[2952]: I1002 18:48:59.420274 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/c5fb377b-9c75-4a00-8488-69920882c91e-policysync\") pod \"calico-node-ndj2r\" (UID: \"c5fb377b-9c75-4a00-8488-69920882c91e\") " pod="calico-system/calico-node-ndj2r" Oct 2 18:48:59.483523 env[1725]: time="2023-10-02T18:48:59.482998529Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-df647db78-vfbfp,Uid:3dbf4489-3940-4a63-903c-cd1652ae5422,Namespace:calico-system,Attempt:0,}" Oct 2 18:48:59.523223 kubelet[2952]: E1002 18:48:59.523175 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.523562 kubelet[2952]: W1002 18:48:59.523508 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.523823 kubelet[2952]: E1002 18:48:59.523788 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.531636 kubelet[2952]: E1002 18:48:59.531597 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.531860 kubelet[2952]: W1002 18:48:59.531825 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.532015 kubelet[2952]: E1002 18:48:59.531987 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.532755 kubelet[2952]: E1002 18:48:59.532714 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.535587 kubelet[2952]: W1002 18:48:59.535524 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.535916 kubelet[2952]: E1002 18:48:59.535877 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.549946 kubelet[2952]: E1002 18:48:59.549906 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.550344 kubelet[2952]: W1002 18:48:59.550299 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.550914 kubelet[2952]: E1002 18:48:59.550867 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.553562 kubelet[2952]: E1002 18:48:59.553509 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.553858 kubelet[2952]: W1002 18:48:59.553812 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.554330 kubelet[2952]: E1002 18:48:59.554290 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.555031 kubelet[2952]: E1002 18:48:59.554990 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.559566 kubelet[2952]: W1002 18:48:59.559509 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.559983 kubelet[2952]: E1002 18:48:59.559953 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.560773 kubelet[2952]: E1002 18:48:59.560733 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.561037 kubelet[2952]: W1002 18:48:59.560994 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.561505 kubelet[2952]: E1002 18:48:59.561466 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.562200 kubelet[2952]: E1002 18:48:59.562165 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.562451 kubelet[2952]: W1002 18:48:59.562369 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.562786 kubelet[2952]: E1002 18:48:59.562758 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.564110 kubelet[2952]: E1002 18:48:59.564068 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.564395 kubelet[2952]: W1002 18:48:59.564352 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.567651 kubelet[2952]: E1002 18:48:59.564875 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.568301 kubelet[2952]: E1002 18:48:59.568263 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.568577 kubelet[2952]: W1002 18:48:59.568541 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.568901 kubelet[2952]: E1002 18:48:59.568872 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.569383 kubelet[2952]: E1002 18:48:59.569352 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.569678 kubelet[2952]: W1002 18:48:59.569641 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.570083 kubelet[2952]: E1002 18:48:59.570037 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.570865 kubelet[2952]: E1002 18:48:59.570812 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.571138 kubelet[2952]: W1002 18:48:59.571080 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.571501 kubelet[2952]: E1002 18:48:59.571470 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.572164 kubelet[2952]: E1002 18:48:59.572132 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.572366 kubelet[2952]: W1002 18:48:59.572335 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.572752 kubelet[2952]: E1002 18:48:59.572719 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.573542 kubelet[2952]: E1002 18:48:59.573502 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.573801 kubelet[2952]: W1002 18:48:59.573746 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.574240 kubelet[2952]: E1002 18:48:59.574203 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.574886 kubelet[2952]: E1002 18:48:59.574854 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.575090 kubelet[2952]: W1002 18:48:59.575059 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.575481 kubelet[2952]: E1002 18:48:59.575453 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.576472 kubelet[2952]: E1002 18:48:59.576436 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.576713 kubelet[2952]: W1002 18:48:59.576676 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.576997 kubelet[2952]: E1002 18:48:59.576969 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.577948 kubelet[2952]: E1002 18:48:59.577877 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.578228 kubelet[2952]: W1002 18:48:59.578190 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.578454 kubelet[2952]: E1002 18:48:59.578394 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.596936 kubelet[2952]: E1002 18:48:59.596889 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.597178 kubelet[2952]: W1002 18:48:59.597142 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.597338 kubelet[2952]: E1002 18:48:59.597313 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.600838 env[1725]: time="2023-10-02T18:48:59.595105071Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:48:59.600838 env[1725]: time="2023-10-02T18:48:59.595204469Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:48:59.600838 env[1725]: time="2023-10-02T18:48:59.595233882Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:48:59.601199 env[1725]: time="2023-10-02T18:48:59.601012294Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0c6e5183c5c73d0264482faaef52d1fd4b0f1c85f1594c0f117f1f1d1216be86 pid=3382 runtime=io.containerd.runc.v2 Oct 2 18:48:59.633936 kubelet[2952]: E1002 18:48:59.633904 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.634171 kubelet[2952]: W1002 18:48:59.634135 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.634354 kubelet[2952]: E1002 18:48:59.634323 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.640579 kubelet[2952]: E1002 18:48:59.640529 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:48:59.640884 kubelet[2952]: W1002 18:48:59.640838 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:48:59.641117 kubelet[2952]: E1002 18:48:59.641087 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:48:59.669622 systemd[1]: Started cri-containerd-0c6e5183c5c73d0264482faaef52d1fd4b0f1c85f1594c0f117f1f1d1216be86.scope. Oct 2 18:48:59.701000 audit[3423]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=3423 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:59.701000 audit[3423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=ffffff60ad20 a2=0 a3=ffff804076c0 items=0 ppid=3156 pid=3423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.722184 kernel: audit: type=1325 audit(1696272539.701:1110): table=filter:105 family=2 entries=14 op=nft_register_rule pid=3423 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:59.722341 kernel: audit: type=1300 audit(1696272539.701:1110): arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=ffffff60ad20 a2=0 a3=ffff804076c0 items=0 ppid=3156 pid=3423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.701000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:59.707000 audit[3423]: NETFILTER_CFG table=nat:106 family=2 entries=20 op=nft_register_rule pid=3423 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:59.742505 kernel: audit: type=1327 audit(1696272539.701:1110): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:59.742679 kernel: audit: type=1325 audit(1696272539.707:1111): table=nat:106 family=2 entries=20 op=nft_register_rule pid=3423 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:48:59.707000 audit[3423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffff60ad20 a2=0 a3=ffff804076c0 items=0 ppid=3156 pid=3423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.707000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.763000 audit: BPF prog-id=127 op=LOAD Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3382 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366535313833633563373364303236343438326661616566353264 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3382 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366535313833633563373364303236343438326661616566353264 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit: BPF prog-id=128 op=LOAD Oct 2 18:48:59.765000 audit[3406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3382 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366535313833633563373364303236343438326661616566353264 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.765000 audit: BPF prog-id=129 op=LOAD Oct 2 18:48:59.765000 audit[3406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3382 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366535313833633563373364303236343438326661616566353264 Oct 2 18:48:59.765000 audit: BPF prog-id=129 op=UNLOAD Oct 2 18:48:59.766000 audit: BPF prog-id=128 op=UNLOAD Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit[3406]: AVC avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:48:59.766000 audit: BPF prog-id=130 op=LOAD Oct 2 18:48:59.766000 audit[3406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3382 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:59.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366535313833633563373364303236343438326661616566353264 Oct 2 18:48:59.840727 env[1725]: time="2023-10-02T18:48:59.840551777Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-df647db78-vfbfp,Uid:3dbf4489-3940-4a63-903c-cd1652ae5422,Namespace:calico-system,Attempt:0,} returns sandbox id \"0c6e5183c5c73d0264482faaef52d1fd4b0f1c85f1594c0f117f1f1d1216be86\"" Oct 2 18:48:59.848893 env[1725]: time="2023-10-02T18:48:59.848821150Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 18:48:59.924485 env[1725]: time="2023-10-02T18:48:59.924378905Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-ndj2r,Uid:c5fb377b-9c75-4a00-8488-69920882c91e,Namespace:calico-system,Attempt:0,}" Oct 2 18:48:59.975720 env[1725]: time="2023-10-02T18:48:59.975581201Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:48:59.976067 env[1725]: time="2023-10-02T18:48:59.975968629Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:48:59.976286 env[1725]: time="2023-10-02T18:48:59.976218606Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:48:59.977427 env[1725]: time="2023-10-02T18:48:59.977241662Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ddd412a2fa39aad35cbcbb9112fe85263861c5d6520dee71acc228f7caeb0554 pid=3446 runtime=io.containerd.runc.v2 Oct 2 18:49:00.018908 systemd[1]: Started cri-containerd-ddd412a2fa39aad35cbcbb9112fe85263861c5d6520dee71acc228f7caeb0554.scope. Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.074000 audit: BPF prog-id=131 op=LOAD Oct 2 18:49:00.076000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.076000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3446 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:00.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643431326132666133396161643335636263626239313132666538 Oct 2 18:49:00.076000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.076000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3446 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:00.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643431326132666133396161643335636263626239313132666538 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.077000 audit: BPF prog-id=132 op=LOAD Oct 2 18:49:00.077000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3446 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:00.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643431326132666133396161643335636263626239313132666538 Oct 2 18:49:00.078000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.078000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.078000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.078000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.078000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.078000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.078000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.078000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.078000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.078000 audit: BPF prog-id=133 op=LOAD Oct 2 18:49:00.078000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3446 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:00.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643431326132666133396161643335636263626239313132666538 Oct 2 18:49:00.080000 audit: BPF prog-id=133 op=UNLOAD Oct 2 18:49:00.080000 audit: BPF prog-id=132 op=UNLOAD Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:00.080000 audit: BPF prog-id=134 op=LOAD Oct 2 18:49:00.080000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3446 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:00.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643431326132666133396161643335636263626239313132666538 Oct 2 18:49:00.128082 env[1725]: time="2023-10-02T18:49:00.127927492Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-ndj2r,Uid:c5fb377b-9c75-4a00-8488-69920882c91e,Namespace:calico-system,Attempt:0,} returns sandbox id \"ddd412a2fa39aad35cbcbb9112fe85263861c5d6520dee71acc228f7caeb0554\"" Oct 2 18:49:00.935000 audit[3505]: NETFILTER_CFG table=filter:107 family=2 entries=14 op=nft_register_rule pid=3505 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:00.935000 audit[3505]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4732 a0=3 a1=fffff59dac50 a2=0 a3=ffffb18e96c0 items=0 ppid=3156 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:00.935000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:00.937000 audit[3505]: NETFILTER_CFG table=nat:108 family=2 entries=20 op=nft_register_rule pid=3505 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:00.937000 audit[3505]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff59dac50 a2=0 a3=ffffb18e96c0 items=0 ppid=3156 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:00.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:01.075582 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2640334315.mount: Deactivated successfully. Oct 2 18:49:02.333427 env[1725]: time="2023-10-02T18:49:02.332293822Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:02.336306 env[1725]: time="2023-10-02T18:49:02.336242819Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a549a5fe632d63eae6f8f617934a309e3e901a6e8cfb0b038a70b8b950fc4dd5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:02.340207 env[1725]: time="2023-10-02T18:49:02.340111750Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:02.344722 env[1725]: time="2023-10-02T18:49:02.344632413Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:02.348449 env[1725]: time="2023-10-02T18:49:02.348320741Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:a549a5fe632d63eae6f8f617934a309e3e901a6e8cfb0b038a70b8b950fc4dd5\"" Oct 2 18:49:02.350469 env[1725]: time="2023-10-02T18:49:02.350363791Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 18:49:02.356851 env[1725]: time="2023-10-02T18:49:02.356648847Z" level=info msg="CreateContainer within sandbox \"0c6e5183c5c73d0264482faaef52d1fd4b0f1c85f1594c0f117f1f1d1216be86\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 18:49:02.386328 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1570473474.mount: Deactivated successfully. Oct 2 18:49:02.398676 env[1725]: time="2023-10-02T18:49:02.398581243Z" level=info msg="CreateContainer within sandbox \"0c6e5183c5c73d0264482faaef52d1fd4b0f1c85f1594c0f117f1f1d1216be86\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"c94d7b5c591dd557389a639d34bbffe7fdf607ff4bddea4d680b222c1cf95dc2\"" Oct 2 18:49:02.399734 env[1725]: time="2023-10-02T18:49:02.399662043Z" level=info msg="StartContainer for \"c94d7b5c591dd557389a639d34bbffe7fdf607ff4bddea4d680b222c1cf95dc2\"" Oct 2 18:49:02.476343 systemd[1]: Started cri-containerd-c94d7b5c591dd557389a639d34bbffe7fdf607ff4bddea4d680b222c1cf95dc2.scope. Oct 2 18:49:02.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.564000 audit: BPF prog-id=135 op=LOAD Oct 2 18:49:02.566000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.566000 audit[3515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=3382 pid=3515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:02.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339346437623563353931646435353733383961363339643334626266 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=3382 pid=3515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:02.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339346437623563353931646435353733383961363339643334626266 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.567000 audit: BPF prog-id=136 op=LOAD Oct 2 18:49:02.567000 audit[3515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=3382 pid=3515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:02.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339346437623563353931646435353733383961363339643334626266 Oct 2 18:49:02.569000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.569000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.569000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.569000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.569000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.569000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.569000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.569000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.569000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.569000 audit: BPF prog-id=137 op=LOAD Oct 2 18:49:02.569000 audit[3515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=3382 pid=3515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:02.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339346437623563353931646435353733383961363339643334626266 Oct 2 18:49:02.570000 audit: BPF prog-id=137 op=UNLOAD Oct 2 18:49:02.571000 audit: BPF prog-id=136 op=UNLOAD Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { perfmon } for pid=3515 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit[3515]: AVC avc: denied { bpf } for pid=3515 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:02.572000 audit: BPF prog-id=138 op=LOAD Oct 2 18:49:02.572000 audit[3515]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=3382 pid=3515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:02.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339346437623563353931646435353733383961363339643334626266 Oct 2 18:49:02.625856 env[1725]: time="2023-10-02T18:49:02.625696023Z" level=info msg="StartContainer for \"c94d7b5c591dd557389a639d34bbffe7fdf607ff4bddea4d680b222c1cf95dc2\" returns successfully" Oct 2 18:49:02.809550 kubelet[2952]: E1002 18:49:02.809212 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.809550 kubelet[2952]: W1002 18:49:02.809252 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.809550 kubelet[2952]: E1002 18:49:02.809293 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.811084 kubelet[2952]: E1002 18:49:02.810606 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.811084 kubelet[2952]: W1002 18:49:02.810641 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.811084 kubelet[2952]: E1002 18:49:02.810679 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.811954 kubelet[2952]: E1002 18:49:02.811597 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.811954 kubelet[2952]: W1002 18:49:02.811628 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.811954 kubelet[2952]: E1002 18:49:02.811671 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.813026 kubelet[2952]: E1002 18:49:02.812490 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.813026 kubelet[2952]: W1002 18:49:02.812545 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.813026 kubelet[2952]: E1002 18:49:02.812588 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.813966 kubelet[2952]: E1002 18:49:02.813671 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.813966 kubelet[2952]: W1002 18:49:02.813707 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.813966 kubelet[2952]: E1002 18:49:02.813749 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.814845 kubelet[2952]: E1002 18:49:02.814485 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.814845 kubelet[2952]: W1002 18:49:02.814520 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.814845 kubelet[2952]: E1002 18:49:02.814574 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.815670 kubelet[2952]: E1002 18:49:02.815628 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.815918 kubelet[2952]: W1002 18:49:02.815878 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.816155 kubelet[2952]: E1002 18:49:02.816110 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.818625 kubelet[2952]: E1002 18:49:02.818582 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.818925 kubelet[2952]: W1002 18:49:02.818881 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.819142 kubelet[2952]: E1002 18:49:02.819110 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.819779 kubelet[2952]: E1002 18:49:02.819743 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.819980 kubelet[2952]: W1002 18:49:02.819950 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.820141 kubelet[2952]: E1002 18:49:02.820118 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.820880 kubelet[2952]: E1002 18:49:02.820843 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.821150 kubelet[2952]: W1002 18:49:02.821112 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.821330 kubelet[2952]: E1002 18:49:02.821303 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.822050 kubelet[2952]: E1002 18:49:02.822007 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.822351 kubelet[2952]: W1002 18:49:02.822309 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.822592 kubelet[2952]: E1002 18:49:02.822566 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.823245 kubelet[2952]: E1002 18:49:02.823208 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.823564 kubelet[2952]: W1002 18:49:02.823525 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.823729 kubelet[2952]: E1002 18:49:02.823704 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.868928 kubelet[2952]: E1002 18:49:02.868888 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.869156 kubelet[2952]: W1002 18:49:02.869117 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.869377 kubelet[2952]: E1002 18:49:02.869344 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.870231 kubelet[2952]: E1002 18:49:02.870197 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.870486 kubelet[2952]: W1002 18:49:02.870451 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.870721 kubelet[2952]: E1002 18:49:02.870694 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.871223 kubelet[2952]: E1002 18:49:02.871176 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.871223 kubelet[2952]: W1002 18:49:02.871213 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.871479 kubelet[2952]: E1002 18:49:02.871273 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.872430 kubelet[2952]: E1002 18:49:02.872355 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.872664 kubelet[2952]: W1002 18:49:02.872435 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.872664 kubelet[2952]: E1002 18:49:02.872500 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.873089 kubelet[2952]: E1002 18:49:02.873041 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.873089 kubelet[2952]: W1002 18:49:02.873079 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.873421 kubelet[2952]: E1002 18:49:02.873369 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.876394 kubelet[2952]: E1002 18:49:02.876259 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.876733 kubelet[2952]: W1002 18:49:02.876692 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.877115 kubelet[2952]: E1002 18:49:02.877084 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.877451 kubelet[2952]: E1002 18:49:02.877422 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.877635 kubelet[2952]: W1002 18:49:02.877604 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.881558 kubelet[2952]: E1002 18:49:02.881501 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.882216 kubelet[2952]: E1002 18:49:02.882179 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.882498 kubelet[2952]: W1002 18:49:02.882395 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.882915 kubelet[2952]: E1002 18:49:02.882881 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.884161 kubelet[2952]: E1002 18:49:02.884121 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.884387 kubelet[2952]: W1002 18:49:02.884347 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.884914 kubelet[2952]: E1002 18:49:02.884874 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.885684 kubelet[2952]: E1002 18:49:02.885645 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.885934 kubelet[2952]: W1002 18:49:02.885899 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.886325 kubelet[2952]: E1002 18:49:02.886292 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.886985 kubelet[2952]: E1002 18:49:02.886951 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.887215 kubelet[2952]: W1002 18:49:02.887178 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.887696 kubelet[2952]: E1002 18:49:02.887651 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.888380 kubelet[2952]: E1002 18:49:02.888341 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.888714 kubelet[2952]: W1002 18:49:02.888671 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.889103 kubelet[2952]: E1002 18:49:02.889052 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.891311 kubelet[2952]: E1002 18:49:02.891267 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.891689 kubelet[2952]: W1002 18:49:02.891642 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.894466 kubelet[2952]: E1002 18:49:02.894379 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.895156 kubelet[2952]: E1002 18:49:02.895122 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.895382 kubelet[2952]: W1002 18:49:02.895348 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.895806 kubelet[2952]: E1002 18:49:02.895773 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.896631 kubelet[2952]: E1002 18:49:02.896594 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.896879 kubelet[2952]: W1002 18:49:02.896843 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.897232 kubelet[2952]: E1002 18:49:02.897194 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.897878 kubelet[2952]: E1002 18:49:02.897838 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.898210 kubelet[2952]: W1002 18:49:02.898167 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.898514 kubelet[2952]: E1002 18:49:02.898482 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.899442 kubelet[2952]: E1002 18:49:02.899377 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.899657 kubelet[2952]: W1002 18:49:02.899624 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.899841 kubelet[2952]: E1002 18:49:02.899818 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:02.900519 kubelet[2952]: E1002 18:49:02.900480 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:02.901359 kubelet[2952]: W1002 18:49:02.901306 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:02.902128 kubelet[2952]: E1002 18:49:02.902077 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.377548 systemd[1]: run-containerd-runc-k8s.io-c94d7b5c591dd557389a639d34bbffe7fdf607ff4bddea4d680b222c1cf95dc2-runc.t5p4Cs.mount: Deactivated successfully. Oct 2 18:49:03.735134 kubelet[2952]: E1002 18:49:03.730796 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.735571 kubelet[2952]: W1002 18:49:03.735505 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.735842 kubelet[2952]: E1002 18:49:03.735802 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.736597 kubelet[2952]: E1002 18:49:03.736549 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.737057 kubelet[2952]: W1002 18:49:03.736998 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.737291 kubelet[2952]: E1002 18:49:03.737264 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.738432 kubelet[2952]: E1002 18:49:03.738043 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.738772 kubelet[2952]: W1002 18:49:03.738712 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.739236 kubelet[2952]: E1002 18:49:03.739188 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.744269 kubelet[2952]: I1002 18:49:03.744197 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-df647db78-vfbfp" podStartSLOduration=-9.22337203211064e+09 pod.CreationTimestamp="2023-10-02 18:48:59 +0000 UTC" firstStartedPulling="2023-10-02 18:48:59.848063455 +0000 UTC m=+21.941029001" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:49:02.743237696 +0000 UTC m=+24.836203266" watchObservedRunningTime="2023-10-02 18:49:03.74413548 +0000 UTC m=+25.837101026" Oct 2 18:49:03.758767 kubelet[2952]: E1002 18:49:03.758709 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.759255 kubelet[2952]: W1002 18:49:03.759190 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.759532 kubelet[2952]: E1002 18:49:03.759486 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.763671 kubelet[2952]: E1002 18:49:03.763610 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.763934 kubelet[2952]: W1002 18:49:03.763896 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.764123 kubelet[2952]: E1002 18:49:03.764096 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.766659 kubelet[2952]: E1002 18:49:03.766593 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.766912 kubelet[2952]: W1002 18:49:03.766873 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.767117 kubelet[2952]: E1002 18:49:03.767089 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.769693 kubelet[2952]: E1002 18:49:03.769628 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.769984 kubelet[2952]: W1002 18:49:03.769945 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.770244 kubelet[2952]: E1002 18:49:03.770212 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.770928 kubelet[2952]: E1002 18:49:03.770894 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.771134 kubelet[2952]: W1002 18:49:03.771101 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.771303 kubelet[2952]: E1002 18:49:03.771279 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.772169 kubelet[2952]: E1002 18:49:03.772129 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.772430 kubelet[2952]: W1002 18:49:03.772378 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.772607 kubelet[2952]: E1002 18:49:03.772581 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.775644 kubelet[2952]: E1002 18:49:03.775599 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.775909 kubelet[2952]: W1002 18:49:03.775871 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.776062 kubelet[2952]: E1002 18:49:03.776037 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.781843 kubelet[2952]: E1002 18:49:03.781728 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.782121 kubelet[2952]: W1002 18:49:03.782053 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.782449 kubelet[2952]: E1002 18:49:03.782356 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.784909 kubelet[2952]: E1002 18:49:03.784871 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.785251 kubelet[2952]: W1002 18:49:03.785163 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.785577 kubelet[2952]: E1002 18:49:03.785515 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.790740 kubelet[2952]: E1002 18:49:03.790684 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.791033 kubelet[2952]: W1002 18:49:03.790976 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.791241 kubelet[2952]: E1002 18:49:03.791197 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.792299 kubelet[2952]: E1002 18:49:03.792227 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.792651 kubelet[2952]: W1002 18:49:03.792598 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.793196 kubelet[2952]: E1002 18:49:03.792820 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.796734 kubelet[2952]: E1002 18:49:03.796692 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.797029 kubelet[2952]: W1002 18:49:03.796993 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.797249 kubelet[2952]: E1002 18:49:03.797210 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.798208 kubelet[2952]: E1002 18:49:03.798168 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.798533 kubelet[2952]: W1002 18:49:03.798448 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.798747 kubelet[2952]: E1002 18:49:03.798709 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.799536 kubelet[2952]: E1002 18:49:03.799495 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.799778 kubelet[2952]: W1002 18:49:03.799740 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.802446 kubelet[2952]: E1002 18:49:03.799984 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.805595 kubelet[2952]: E1002 18:49:03.805548 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.805880 kubelet[2952]: W1002 18:49:03.805842 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.806098 kubelet[2952]: E1002 18:49:03.806057 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.806855 kubelet[2952]: E1002 18:49:03.806821 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.807063 kubelet[2952]: W1002 18:49:03.807030 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.807293 kubelet[2952]: E1002 18:49:03.807251 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.809721 kubelet[2952]: E1002 18:49:03.809678 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.810629 kubelet[2952]: W1002 18:49:03.810571 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.810854 kubelet[2952]: E1002 18:49:03.810808 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.814797 kubelet[2952]: E1002 18:49:03.814754 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.815041 kubelet[2952]: W1002 18:49:03.815007 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.815275 kubelet[2952]: E1002 18:49:03.815235 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.816020 kubelet[2952]: E1002 18:49:03.815986 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.816270 kubelet[2952]: W1002 18:49:03.816236 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.816536 kubelet[2952]: E1002 18:49:03.816508 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.820771 kubelet[2952]: E1002 18:49:03.820726 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.821115 kubelet[2952]: W1002 18:49:03.821043 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.821353 kubelet[2952]: E1002 18:49:03.821311 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.822714 kubelet[2952]: E1002 18:49:03.822638 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.823036 kubelet[2952]: W1002 18:49:03.822981 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.823241 kubelet[2952]: E1002 18:49:03.823200 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.826780 kubelet[2952]: E1002 18:49:03.826715 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.827144 kubelet[2952]: W1002 18:49:03.827089 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.827788 kubelet[2952]: E1002 18:49:03.827356 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.830982 kubelet[2952]: E1002 18:49:03.830904 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.831285 kubelet[2952]: W1002 18:49:03.831230 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.831549 kubelet[2952]: E1002 18:49:03.831521 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.832679 kubelet[2952]: E1002 18:49:03.832602 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.832986 kubelet[2952]: W1002 18:49:03.832923 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.833282 kubelet[2952]: E1002 18:49:03.833209 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.835053 kubelet[2952]: E1002 18:49:03.835016 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.835322 kubelet[2952]: W1002 18:49:03.835285 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.835712 kubelet[2952]: E1002 18:49:03.835646 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.838200 kubelet[2952]: E1002 18:49:03.838162 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.838688 kubelet[2952]: W1002 18:49:03.838606 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.839547 kubelet[2952]: E1002 18:49:03.839126 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.840305 kubelet[2952]: E1002 18:49:03.840259 2952 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 18:49:03.840523 kubelet[2952]: W1002 18:49:03.840492 2952 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 18:49:03.840928 kubelet[2952]: E1002 18:49:03.840898 2952 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 18:49:03.845856 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1254237670.mount: Deactivated successfully. Oct 2 18:49:04.010488 env[1725]: time="2023-10-02T18:49:04.004335665Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:04.010488 env[1725]: time="2023-10-02T18:49:04.007911476Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:125b9deae5a04d82056336c1aff8ab9c7ed64cdc224c7139c7433a3a29c21fc8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:04.013077 env[1725]: time="2023-10-02T18:49:04.013019115Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:04.012000 audit[3631]: NETFILTER_CFG table=filter:109 family=2 entries=13 op=nft_register_rule pid=3631 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:04.012000 audit[3631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffc70f4300 a2=0 a3=ffff8df936c0 items=0 ppid=3156 pid=3631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:04.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:04.015244 env[1725]: time="2023-10-02T18:49:04.015175218Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:04.017838 env[1725]: time="2023-10-02T18:49:04.016564687Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:125b9deae5a04d82056336c1aff8ab9c7ed64cdc224c7139c7433a3a29c21fc8\"" Oct 2 18:49:04.016000 audit[3631]: NETFILTER_CFG table=nat:110 family=2 entries=27 op=nft_register_chain pid=3631 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:04.016000 audit[3631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8836 a0=3 a1=ffffc70f4300 a2=0 a3=ffff8df936c0 items=0 ppid=3156 pid=3631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:04.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:04.025775 env[1725]: time="2023-10-02T18:49:04.025703414Z" level=info msg="CreateContainer within sandbox \"ddd412a2fa39aad35cbcbb9112fe85263861c5d6520dee71acc228f7caeb0554\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 18:49:04.056244 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2013027540.mount: Deactivated successfully. Oct 2 18:49:04.076923 env[1725]: time="2023-10-02T18:49:04.076220738Z" level=info msg="CreateContainer within sandbox \"ddd412a2fa39aad35cbcbb9112fe85263861c5d6520dee71acc228f7caeb0554\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"ef734a65c0200afc117b0c2e0b74790e596dd3b0a0e325cc002df097346f6532\"" Oct 2 18:49:04.080248 env[1725]: time="2023-10-02T18:49:04.079266633Z" level=info msg="StartContainer for \"ef734a65c0200afc117b0c2e0b74790e596dd3b0a0e325cc002df097346f6532\"" Oct 2 18:49:04.129667 systemd[1]: Started cri-containerd-ef734a65c0200afc117b0c2e0b74790e596dd3b0a0e325cc002df097346f6532.scope. Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.190005 kernel: kauditd_printk_skb: 185 callbacks suppressed Oct 2 18:49:04.190206 kernel: audit: type=1400 audit(1696272544.186:1170): avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3446 pid=3641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:04.211555 kernel: audit: type=1300 audit(1696272544.186:1170): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3446 pid=3641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:04.211784 kernel: audit: type=1327 audit(1696272544.186:1170): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373334613635633032303061666331313762306332653062373437 Oct 2 18:49:04.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373334613635633032303061666331313762306332653062373437 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.229887 kernel: audit: type=1400 audit(1696272544.186:1171): avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.239232 kernel: audit: type=1400 audit(1696272544.186:1171): avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.247853 kernel: audit: type=1400 audit(1696272544.186:1171): avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.269268 kernel: audit: type=1400 audit(1696272544.186:1171): avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.269475 kernel: audit: type=1400 audit(1696272544.186:1171): avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.281263 kernel: audit: type=1400 audit(1696272544.186:1171): avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.292104 kernel: audit: type=1400 audit(1696272544.186:1171): avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.186000 audit: BPF prog-id=139 op=LOAD Oct 2 18:49:04.186000 audit[3641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3446 pid=3641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:04.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373334613635633032303061666331313762306332653062373437 Oct 2 18:49:04.188000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.188000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.188000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.188000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.188000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.188000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.188000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.188000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.188000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.188000 audit: BPF prog-id=140 op=LOAD Oct 2 18:49:04.188000 audit[3641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3446 pid=3641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:04.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373334613635633032303061666331313762306332653062373437 Oct 2 18:49:04.196000 audit: BPF prog-id=140 op=UNLOAD Oct 2 18:49:04.197000 audit: BPF prog-id=139 op=UNLOAD Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { perfmon } for pid=3641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit[3641]: AVC avc: denied { bpf } for pid=3641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:04.197000 audit: BPF prog-id=141 op=LOAD Oct 2 18:49:04.197000 audit[3641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3446 pid=3641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:04.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373334613635633032303061666331313762306332653062373437 Oct 2 18:49:04.307524 env[1725]: time="2023-10-02T18:49:04.307441737Z" level=info msg="StartContainer for \"ef734a65c0200afc117b0c2e0b74790e596dd3b0a0e325cc002df097346f6532\" returns successfully" Oct 2 18:49:04.333338 systemd[1]: cri-containerd-ef734a65c0200afc117b0c2e0b74790e596dd3b0a0e325cc002df097346f6532.scope: Deactivated successfully. Oct 2 18:49:04.336000 audit: BPF prog-id=141 op=UNLOAD Oct 2 18:49:04.397224 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ef734a65c0200afc117b0c2e0b74790e596dd3b0a0e325cc002df097346f6532-rootfs.mount: Deactivated successfully. Oct 2 18:49:04.869903 env[1725]: time="2023-10-02T18:49:04.869794324Z" level=info msg="shim disconnected" id=ef734a65c0200afc117b0c2e0b74790e596dd3b0a0e325cc002df097346f6532 Oct 2 18:49:04.869903 env[1725]: time="2023-10-02T18:49:04.869896278Z" level=warning msg="cleaning up after shim disconnected" id=ef734a65c0200afc117b0c2e0b74790e596dd3b0a0e325cc002df097346f6532 namespace=k8s.io Oct 2 18:49:04.870396 env[1725]: time="2023-10-02T18:49:04.869924406Z" level=info msg="cleaning up dead shim" Oct 2 18:49:04.911434 env[1725]: time="2023-10-02T18:49:04.911309532Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:49:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3683 runtime=io.containerd.runc.v2\n" Oct 2 18:49:05.731205 env[1725]: time="2023-10-02T18:49:05.731125230Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 18:49:06.935323 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1157760655.mount: Deactivated successfully. Oct 2 18:49:10.760095 env[1725]: time="2023-10-02T18:49:10.759921072Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:10.764694 env[1725]: time="2023-10-02T18:49:10.764603657Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0bb8d6f033a0548573ff857c26574d89a8ad4b691aa88a32eddf0c7db06599ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:10.769022 env[1725]: time="2023-10-02T18:49:10.768937456Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:10.773812 env[1725]: time="2023-10-02T18:49:10.773262603Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:10.775293 env[1725]: time="2023-10-02T18:49:10.775209623Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:0bb8d6f033a0548573ff857c26574d89a8ad4b691aa88a32eddf0c7db06599ef\"" Oct 2 18:49:10.781557 env[1725]: time="2023-10-02T18:49:10.780962506Z" level=info msg="CreateContainer within sandbox \"ddd412a2fa39aad35cbcbb9112fe85263861c5d6520dee71acc228f7caeb0554\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 18:49:10.807308 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3998732016.mount: Deactivated successfully. Oct 2 18:49:10.824701 env[1725]: time="2023-10-02T18:49:10.824631596Z" level=info msg="CreateContainer within sandbox \"ddd412a2fa39aad35cbcbb9112fe85263861c5d6520dee71acc228f7caeb0554\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"58693fa7c984ab275127d49371a3cda6203136a88cf6fddce28207edca2bb5c4\"" Oct 2 18:49:10.826397 env[1725]: time="2023-10-02T18:49:10.826320960Z" level=info msg="StartContainer for \"58693fa7c984ab275127d49371a3cda6203136a88cf6fddce28207edca2bb5c4\"" Oct 2 18:49:10.894665 systemd[1]: Started cri-containerd-58693fa7c984ab275127d49371a3cda6203136a88cf6fddce28207edca2bb5c4.scope. Oct 2 18:49:10.974615 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 18:49:10.974830 kernel: audit: type=1400 audit(1696272550.964:1177): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.964000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.964000 audit[3705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3446 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:10.987613 kernel: audit: type=1300 audit(1696272550.964:1177): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3446 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:10.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538363933666137633938346162323735313237643439333731613363 Oct 2 18:49:10.998916 kernel: audit: type=1327 audit(1696272550.964:1177): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538363933666137633938346162323735313237643439333731613363 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:11.013361 kernel: audit: type=1400 audit(1696272550.967:1178): avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:11.029647 kernel: audit: type=1400 audit(1696272550.967:1178): avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:11.029808 kernel: audit: type=1400 audit(1696272550.967:1178): avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:11.046433 kernel: audit: type=1400 audit(1696272550.967:1178): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:11.046553 kernel: audit: type=1400 audit(1696272550.967:1178): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:11.055908 kernel: audit: type=1400 audit(1696272550.967:1178): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:11.064763 kernel: audit: type=1400 audit(1696272550.967:1178): avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.967000 audit: BPF prog-id=142 op=LOAD Oct 2 18:49:10.967000 audit[3705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3446 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:10.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538363933666137633938346162323735313237643439333731613363 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit: BPF prog-id=143 op=LOAD Oct 2 18:49:10.974000 audit[3705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3446 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:10.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538363933666137633938346162323735313237643439333731613363 Oct 2 18:49:10.974000 audit: BPF prog-id=143 op=UNLOAD Oct 2 18:49:10.974000 audit: BPF prog-id=142 op=UNLOAD Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { perfmon } for pid=3705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit[3705]: AVC avc: denied { bpf } for pid=3705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:10.974000 audit: BPF prog-id=144 op=LOAD Oct 2 18:49:10.974000 audit[3705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3446 pid=3705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:10.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538363933666137633938346162323735313237643439333731613363 Oct 2 18:49:11.072471 env[1725]: time="2023-10-02T18:49:11.069702375Z" level=info msg="StartContainer for \"58693fa7c984ab275127d49371a3cda6203136a88cf6fddce28207edca2bb5c4\" returns successfully" Oct 2 18:49:12.447387 env[1725]: time="2023-10-02T18:49:12.447288278Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 18:49:12.453990 systemd[1]: cri-containerd-58693fa7c984ab275127d49371a3cda6203136a88cf6fddce28207edca2bb5c4.scope: Deactivated successfully. Oct 2 18:49:12.458000 audit: BPF prog-id=144 op=UNLOAD Oct 2 18:49:12.478431 kubelet[2952]: I1002 18:49:12.478355 2952 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 18:49:12.534677 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-58693fa7c984ab275127d49371a3cda6203136a88cf6fddce28207edca2bb5c4-rootfs.mount: Deactivated successfully. Oct 2 18:49:12.542331 kubelet[2952]: I1002 18:49:12.542223 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:49:12.556192 systemd[1]: Created slice kubepods-burstable-pod534b67ac_3f8e_4174_92b1_e0fd916c7573.slice. Oct 2 18:49:12.568190 kubelet[2952]: I1002 18:49:12.566582 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:49:12.574454 kubelet[2952]: I1002 18:49:12.568949 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:49:12.576645 kubelet[2952]: I1002 18:49:12.576597 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hr4j6\" (UniqueName: \"kubernetes.io/projected/534b67ac-3f8e-4174-92b1-e0fd916c7573-kube-api-access-hr4j6\") pod \"coredns-787d4945fb-7kmmp\" (UID: \"534b67ac-3f8e-4174-92b1-e0fd916c7573\") " pod="kube-system/coredns-787d4945fb-7kmmp" Oct 2 18:49:12.578946 kubelet[2952]: I1002 18:49:12.578913 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/534b67ac-3f8e-4174-92b1-e0fd916c7573-config-volume\") pod \"coredns-787d4945fb-7kmmp\" (UID: \"534b67ac-3f8e-4174-92b1-e0fd916c7573\") " pod="kube-system/coredns-787d4945fb-7kmmp" Oct 2 18:49:12.581085 systemd[1]: Created slice kubepods-burstable-pod0c46469d_7c78_48bb_8731_b6dc698251b5.slice. Oct 2 18:49:12.583366 kubelet[2952]: W1002 18:49:12.583280 2952 reflector.go:424] object-"kube-system"/"coredns": failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:49:12.584760 kubelet[2952]: E1002 18:49:12.584727 2952 reflector.go:140] object-"kube-system"/"coredns": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:49:12.611928 systemd[1]: Created slice kubepods-besteffort-pod5a68613b_90c4_44a5_ae69_ec5249ade95a.slice. Oct 2 18:49:12.633561 kubelet[2952]: I1002 18:49:12.633514 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:49:12.649198 systemd[1]: Created slice kubepods-besteffort-pod389cc212_0d3c_420e_bfc5_2856182496ad.slice. Oct 2 18:49:12.684320 kubelet[2952]: I1002 18:49:12.684218 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-54n56\" (UniqueName: \"kubernetes.io/projected/389cc212-0d3c-420e-bfc5-2856182496ad-kube-api-access-54n56\") pod \"csi-node-driver-4877r\" (UID: \"389cc212-0d3c-420e-bfc5-2856182496ad\") " pod="calico-system/csi-node-driver-4877r" Oct 2 18:49:12.684901 kubelet[2952]: I1002 18:49:12.684857 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4dk9k\" (UniqueName: \"kubernetes.io/projected/5a68613b-90c4-44a5-ae69-ec5249ade95a-kube-api-access-4dk9k\") pod \"calico-kube-controllers-69c848ddc6-vqvd7\" (UID: \"5a68613b-90c4-44a5-ae69-ec5249ade95a\") " pod="calico-system/calico-kube-controllers-69c848ddc6-vqvd7" Oct 2 18:49:12.685200 kubelet[2952]: I1002 18:49:12.685167 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/389cc212-0d3c-420e-bfc5-2856182496ad-kubelet-dir\") pod \"csi-node-driver-4877r\" (UID: \"389cc212-0d3c-420e-bfc5-2856182496ad\") " pod="calico-system/csi-node-driver-4877r" Oct 2 18:49:12.685456 kubelet[2952]: I1002 18:49:12.685427 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/389cc212-0d3c-420e-bfc5-2856182496ad-socket-dir\") pod \"csi-node-driver-4877r\" (UID: \"389cc212-0d3c-420e-bfc5-2856182496ad\") " pod="calico-system/csi-node-driver-4877r" Oct 2 18:49:12.685744 kubelet[2952]: I1002 18:49:12.685699 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-25sbp\" (UniqueName: \"kubernetes.io/projected/0c46469d-7c78-48bb-8731-b6dc698251b5-kube-api-access-25sbp\") pod \"coredns-787d4945fb-5bdzb\" (UID: \"0c46469d-7c78-48bb-8731-b6dc698251b5\") " pod="kube-system/coredns-787d4945fb-5bdzb" Oct 2 18:49:12.694474 kubelet[2952]: I1002 18:49:12.693799 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/389cc212-0d3c-420e-bfc5-2856182496ad-varrun\") pod \"csi-node-driver-4877r\" (UID: \"389cc212-0d3c-420e-bfc5-2856182496ad\") " pod="calico-system/csi-node-driver-4877r" Oct 2 18:49:12.694474 kubelet[2952]: I1002 18:49:12.693915 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/389cc212-0d3c-420e-bfc5-2856182496ad-etccalico\") pod \"csi-node-driver-4877r\" (UID: \"389cc212-0d3c-420e-bfc5-2856182496ad\") " pod="calico-system/csi-node-driver-4877r" Oct 2 18:49:12.694474 kubelet[2952]: I1002 18:49:12.693975 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/0c46469d-7c78-48bb-8731-b6dc698251b5-config-volume\") pod \"coredns-787d4945fb-5bdzb\" (UID: \"0c46469d-7c78-48bb-8731-b6dc698251b5\") " pod="kube-system/coredns-787d4945fb-5bdzb" Oct 2 18:49:12.694474 kubelet[2952]: I1002 18:49:12.694020 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/389cc212-0d3c-420e-bfc5-2856182496ad-registration-dir\") pod \"csi-node-driver-4877r\" (UID: \"389cc212-0d3c-420e-bfc5-2856182496ad\") " pod="calico-system/csi-node-driver-4877r" Oct 2 18:49:12.959117 env[1725]: time="2023-10-02T18:49:12.959038125Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-4877r,Uid:389cc212-0d3c-420e-bfc5-2856182496ad,Namespace:calico-system,Attempt:0,}" Oct 2 18:49:13.146752 env[1725]: time="2023-10-02T18:49:13.146116541Z" level=info msg="shim disconnected" id=58693fa7c984ab275127d49371a3cda6203136a88cf6fddce28207edca2bb5c4 Oct 2 18:49:13.146752 env[1725]: time="2023-10-02T18:49:13.146189418Z" level=warning msg="cleaning up after shim disconnected" id=58693fa7c984ab275127d49371a3cda6203136a88cf6fddce28207edca2bb5c4 namespace=k8s.io Oct 2 18:49:13.146752 env[1725]: time="2023-10-02T18:49:13.146211774Z" level=info msg="cleaning up dead shim" Oct 2 18:49:13.218514 env[1725]: time="2023-10-02T18:49:13.218256087Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:49:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3755 runtime=io.containerd.runc.v2\n" Oct 2 18:49:13.230225 env[1725]: time="2023-10-02T18:49:13.230156556Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-vqvd7,Uid:5a68613b-90c4-44a5-ae69-ec5249ade95a,Namespace:calico-system,Attempt:0,}" Oct 2 18:49:13.391170 env[1725]: time="2023-10-02T18:49:13.391066305Z" level=error msg="Failed to destroy network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.392196 env[1725]: time="2023-10-02T18:49:13.392111618Z" level=error msg="encountered an error cleaning up failed sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.392557 env[1725]: time="2023-10-02T18:49:13.392487296Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-4877r,Uid:389cc212-0d3c-420e-bfc5-2856182496ad,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.395214 kubelet[2952]: E1002 18:49:13.393086 2952 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.395214 kubelet[2952]: E1002 18:49:13.393204 2952 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-4877r" Oct 2 18:49:13.395214 kubelet[2952]: E1002 18:49:13.393277 2952 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-4877r" Oct 2 18:49:13.397519 kubelet[2952]: E1002 18:49:13.397177 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-4877r_calico-system(389cc212-0d3c-420e-bfc5-2856182496ad)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-4877r_calico-system(389cc212-0d3c-420e-bfc5-2856182496ad)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-4877r" podUID=389cc212-0d3c-420e-bfc5-2856182496ad Oct 2 18:49:13.437218 env[1725]: time="2023-10-02T18:49:13.437132555Z" level=error msg="Failed to destroy network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.437919 env[1725]: time="2023-10-02T18:49:13.437824894Z" level=error msg="encountered an error cleaning up failed sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.438119 env[1725]: time="2023-10-02T18:49:13.437941572Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-vqvd7,Uid:5a68613b-90c4-44a5-ae69-ec5249ade95a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.438911 kubelet[2952]: E1002 18:49:13.438545 2952 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.438911 kubelet[2952]: E1002 18:49:13.438630 2952 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69c848ddc6-vqvd7" Oct 2 18:49:13.438911 kubelet[2952]: E1002 18:49:13.438670 2952 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69c848ddc6-vqvd7" Oct 2 18:49:13.439222 kubelet[2952]: E1002 18:49:13.438747 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-69c848ddc6-vqvd7_calico-system(5a68613b-90c4-44a5-ae69-ec5249ade95a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-69c848ddc6-vqvd7_calico-system(5a68613b-90c4-44a5-ae69-ec5249ade95a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69c848ddc6-vqvd7" podUID=5a68613b-90c4-44a5-ae69-ec5249ade95a Oct 2 18:49:13.694789 kubelet[2952]: E1002 18:49:13.694743 2952 configmap.go:199] Couldn't get configMap kube-system/coredns: failed to sync configmap cache: timed out waiting for the condition Oct 2 18:49:13.695628 kubelet[2952]: E1002 18:49:13.695590 2952 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/534b67ac-3f8e-4174-92b1-e0fd916c7573-config-volume podName:534b67ac-3f8e-4174-92b1-e0fd916c7573 nodeName:}" failed. No retries permitted until 2023-10-02 18:49:14.195547446 +0000 UTC m=+36.288512992 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config-volume" (UniqueName: "kubernetes.io/configmap/534b67ac-3f8e-4174-92b1-e0fd916c7573-config-volume") pod "coredns-787d4945fb-7kmmp" (UID: "534b67ac-3f8e-4174-92b1-e0fd916c7573") : failed to sync configmap cache: timed out waiting for the condition Oct 2 18:49:13.769207 kubelet[2952]: I1002 18:49:13.769145 2952 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:13.771843 env[1725]: time="2023-10-02T18:49:13.771777581Z" level=info msg="StopPodSandbox for \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\"" Oct 2 18:49:13.784853 env[1725]: time="2023-10-02T18:49:13.784761187Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 18:49:13.791728 kubelet[2952]: I1002 18:49:13.791651 2952 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:13.798511 kubelet[2952]: E1002 18:49:13.795910 2952 configmap.go:199] Couldn't get configMap kube-system/coredns: failed to sync configmap cache: timed out waiting for the condition Oct 2 18:49:13.798511 kubelet[2952]: E1002 18:49:13.796032 2952 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/0c46469d-7c78-48bb-8731-b6dc698251b5-config-volume podName:0c46469d-7c78-48bb-8731-b6dc698251b5 nodeName:}" failed. No retries permitted until 2023-10-02 18:49:14.295999463 +0000 UTC m=+36.388965009 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config-volume" (UniqueName: "kubernetes.io/configmap/0c46469d-7c78-48bb-8731-b6dc698251b5-config-volume") pod "coredns-787d4945fb-5bdzb" (UID: "0c46469d-7c78-48bb-8731-b6dc698251b5") : failed to sync configmap cache: timed out waiting for the condition Oct 2 18:49:13.799323 env[1725]: time="2023-10-02T18:49:13.799235998Z" level=info msg="StopPodSandbox for \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\"" Oct 2 18:49:13.821007 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc-shm.mount: Deactivated successfully. Oct 2 18:49:13.909885 env[1725]: time="2023-10-02T18:49:13.909770120Z" level=error msg="StopPodSandbox for \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\" failed" error="failed to destroy network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.910574 kubelet[2952]: E1002 18:49:13.910281 2952 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:13.910924 kubelet[2952]: E1002 18:49:13.910392 2952 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc} Oct 2 18:49:13.910924 kubelet[2952]: E1002 18:49:13.910825 2952 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"389cc212-0d3c-420e-bfc5-2856182496ad\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:49:13.910924 kubelet[2952]: E1002 18:49:13.910882 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"389cc212-0d3c-420e-bfc5-2856182496ad\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-4877r" podUID=389cc212-0d3c-420e-bfc5-2856182496ad Oct 2 18:49:13.930050 env[1725]: time="2023-10-02T18:49:13.929971206Z" level=error msg="StopPodSandbox for \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\" failed" error="failed to destroy network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:13.930859 kubelet[2952]: E1002 18:49:13.930632 2952 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:13.930859 kubelet[2952]: E1002 18:49:13.930701 2952 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8} Oct 2 18:49:13.930859 kubelet[2952]: E1002 18:49:13.930764 2952 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5a68613b-90c4-44a5-ae69-ec5249ade95a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:49:13.930859 kubelet[2952]: E1002 18:49:13.930816 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5a68613b-90c4-44a5-ae69-ec5249ade95a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69c848ddc6-vqvd7" podUID=5a68613b-90c4-44a5-ae69-ec5249ade95a Oct 2 18:49:14.408179 env[1725]: time="2023-10-02T18:49:14.408092137Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-7kmmp,Uid:534b67ac-3f8e-4174-92b1-e0fd916c7573,Namespace:kube-system,Attempt:0,}" Oct 2 18:49:14.411047 env[1725]: time="2023-10-02T18:49:14.410974414Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-5bdzb,Uid:0c46469d-7c78-48bb-8731-b6dc698251b5,Namespace:kube-system,Attempt:0,}" Oct 2 18:49:14.656016 env[1725]: time="2023-10-02T18:49:14.655939730Z" level=error msg="Failed to destroy network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.657006 env[1725]: time="2023-10-02T18:49:14.656925653Z" level=error msg="encountered an error cleaning up failed sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.657338 env[1725]: time="2023-10-02T18:49:14.657251926Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-7kmmp,Uid:534b67ac-3f8e-4174-92b1-e0fd916c7573,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.663265 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a-shm.mount: Deactivated successfully. Oct 2 18:49:14.666200 kubelet[2952]: E1002 18:49:14.666144 2952 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.666385 kubelet[2952]: E1002 18:49:14.666258 2952 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-7kmmp" Oct 2 18:49:14.666385 kubelet[2952]: E1002 18:49:14.666343 2952 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-7kmmp" Oct 2 18:49:14.666774 kubelet[2952]: E1002 18:49:14.666724 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-7kmmp_kube-system(534b67ac-3f8e-4174-92b1-e0fd916c7573)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-7kmmp_kube-system(534b67ac-3f8e-4174-92b1-e0fd916c7573)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-7kmmp" podUID=534b67ac-3f8e-4174-92b1-e0fd916c7573 Oct 2 18:49:14.679193 env[1725]: time="2023-10-02T18:49:14.679116596Z" level=error msg="Failed to destroy network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.680134 env[1725]: time="2023-10-02T18:49:14.680059558Z" level=error msg="encountered an error cleaning up failed sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.680581 env[1725]: time="2023-10-02T18:49:14.680510682Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-5bdzb,Uid:0c46469d-7c78-48bb-8731-b6dc698251b5,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.681288 kubelet[2952]: E1002 18:49:14.681232 2952 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.681511 kubelet[2952]: E1002 18:49:14.681349 2952 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-5bdzb" Oct 2 18:49:14.681511 kubelet[2952]: E1002 18:49:14.681478 2952 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-5bdzb" Oct 2 18:49:14.681724 kubelet[2952]: E1002 18:49:14.681641 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-5bdzb_kube-system(0c46469d-7c78-48bb-8731-b6dc698251b5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-5bdzb_kube-system(0c46469d-7c78-48bb-8731-b6dc698251b5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-5bdzb" podUID=0c46469d-7c78-48bb-8731-b6dc698251b5 Oct 2 18:49:14.800043 kubelet[2952]: I1002 18:49:14.799993 2952 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:14.801148 env[1725]: time="2023-10-02T18:49:14.801090505Z" level=info msg="StopPodSandbox for \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\"" Oct 2 18:49:14.808972 kubelet[2952]: I1002 18:49:14.808927 2952 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:14.815446 env[1725]: time="2023-10-02T18:49:14.815349214Z" level=info msg="StopPodSandbox for \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\"" Oct 2 18:49:14.820366 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79-shm.mount: Deactivated successfully. Oct 2 18:49:14.909130 env[1725]: time="2023-10-02T18:49:14.909041186Z" level=error msg="StopPodSandbox for \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\" failed" error="failed to destroy network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.909898 kubelet[2952]: E1002 18:49:14.909646 2952 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:14.909898 kubelet[2952]: E1002 18:49:14.909718 2952 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79} Oct 2 18:49:14.909898 kubelet[2952]: E1002 18:49:14.909792 2952 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0c46469d-7c78-48bb-8731-b6dc698251b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:49:14.909898 kubelet[2952]: E1002 18:49:14.909852 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0c46469d-7c78-48bb-8731-b6dc698251b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-5bdzb" podUID=0c46469d-7c78-48bb-8731-b6dc698251b5 Oct 2 18:49:14.935845 env[1725]: time="2023-10-02T18:49:14.935620969Z" level=error msg="StopPodSandbox for \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\" failed" error="failed to destroy network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 18:49:14.936968 kubelet[2952]: E1002 18:49:14.936652 2952 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:14.936968 kubelet[2952]: E1002 18:49:14.936761 2952 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a} Oct 2 18:49:14.936968 kubelet[2952]: E1002 18:49:14.936840 2952 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"534b67ac-3f8e-4174-92b1-e0fd916c7573\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 18:49:14.936968 kubelet[2952]: E1002 18:49:14.936894 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"534b67ac-3f8e-4174-92b1-e0fd916c7573\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-7kmmp" podUID=534b67ac-3f8e-4174-92b1-e0fd916c7573 Oct 2 18:49:20.136027 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3635537081.mount: Deactivated successfully. Oct 2 18:49:20.257817 env[1725]: time="2023-10-02T18:49:20.257739138Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.261295 env[1725]: time="2023-10-02T18:49:20.261220322Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8a2dff14388de51338e7468b834f0b37232379ce3cd97ac3c4a07b110a41ad00,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.264224 env[1725]: time="2023-10-02T18:49:20.264150443Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.267164 env[1725]: time="2023-10-02T18:49:20.267104036Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.268501 env[1725]: time="2023-10-02T18:49:20.268441806Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:8a2dff14388de51338e7468b834f0b37232379ce3cd97ac3c4a07b110a41ad00\"" Oct 2 18:49:20.277244 env[1725]: time="2023-10-02T18:49:20.277182045Z" level=info msg="CreateContainer within sandbox \"ddd412a2fa39aad35cbcbb9112fe85263861c5d6520dee71acc228f7caeb0554\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 18:49:20.302585 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2425480887.mount: Deactivated successfully. Oct 2 18:49:20.318820 env[1725]: time="2023-10-02T18:49:20.318723913Z" level=info msg="CreateContainer within sandbox \"ddd412a2fa39aad35cbcbb9112fe85263861c5d6520dee71acc228f7caeb0554\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"6eb32345eaef09a6630d7d7b51feabc85e4d430c266d7f8588a904cfde77f3cf\"" Oct 2 18:49:20.323043 env[1725]: time="2023-10-02T18:49:20.319764780Z" level=info msg="StartContainer for \"6eb32345eaef09a6630d7d7b51feabc85e4d430c266d7f8588a904cfde77f3cf\"" Oct 2 18:49:20.372007 systemd[1]: Started cri-containerd-6eb32345eaef09a6630d7d7b51feabc85e4d430c266d7f8588a904cfde77f3cf.scope. Oct 2 18:49:20.445922 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 18:49:20.446118 kernel: audit: type=1400 audit(1696272560.435:1184): avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.435000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.435000 audit[3985]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3446 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:20.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623332333435656165663039613636333064376437623531666561 Oct 2 18:49:20.476272 kernel: audit: type=1300 audit(1696272560.435:1184): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3446 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:20.476502 kernel: audit: type=1327 audit(1696272560.435:1184): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623332333435656165663039613636333064376437623531666561 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.494592 kernel: audit: type=1400 audit(1696272560.440:1185): avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.494789 kernel: audit: type=1400 audit(1696272560.440:1185): avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.494840 kernel: audit: type=1400 audit(1696272560.440:1185): avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.510500 kernel: audit: type=1400 audit(1696272560.440:1185): avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.520568 kernel: audit: type=1400 audit(1696272560.440:1185): avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.520738 kernel: audit: type=1400 audit(1696272560.440:1185): avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.537616 kernel: audit: type=1400 audit(1696272560.440:1185): avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.440000 audit: BPF prog-id=145 op=LOAD Oct 2 18:49:20.440000 audit[3985]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3446 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:20.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623332333435656165663039613636333064376437623531666561 Oct 2 18:49:20.445000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.445000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.445000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.445000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.445000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.445000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.445000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.445000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.445000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.445000 audit: BPF prog-id=146 op=LOAD Oct 2 18:49:20.445000 audit[3985]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3446 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:20.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623332333435656165663039613636333064376437623531666561 Oct 2 18:49:20.445000 audit: BPF prog-id=146 op=UNLOAD Oct 2 18:49:20.446000 audit: BPF prog-id=145 op=UNLOAD Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:20.446000 audit: BPF prog-id=147 op=LOAD Oct 2 18:49:20.446000 audit[3985]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3446 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:20.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623332333435656165663039613636333064376437623531666561 Oct 2 18:49:20.542147 env[1725]: time="2023-10-02T18:49:20.540703878Z" level=info msg="StartContainer for \"6eb32345eaef09a6630d7d7b51feabc85e4d430c266d7f8588a904cfde77f3cf\" returns successfully" Oct 2 18:49:20.695028 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 18:49:20.695233 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 18:49:22.670000 audit[4133]: AVC avc: denied { write } for pid=4133 comm="tee" name="fd" dev="proc" ino=21777 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:49:22.670000 audit[4133]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe5acc982 a2=241 a3=1b6 items=1 ppid=4097 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:22.670000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 18:49:22.670000 audit: PATH item=0 name="/dev/fd/63" inode=21204 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:49:22.670000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:49:22.705000 audit[4125]: AVC avc: denied { write } for pid=4125 comm="tee" name="fd" dev="proc" ino=21211 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:49:22.705000 audit[4125]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffccb15971 a2=241 a3=1b6 items=1 ppid=4101 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:22.705000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 18:49:22.705000 audit: PATH item=0 name="/dev/fd/63" inode=21768 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:49:22.705000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:49:22.785000 audit[4141]: AVC avc: denied { write } for pid=4141 comm="tee" name="fd" dev="proc" ino=21230 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:49:22.785000 audit[4141]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff99c9981 a2=241 a3=1b6 items=1 ppid=4102 pid=4141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:22.794000 audit[4158]: AVC avc: denied { write } for pid=4158 comm="tee" name="fd" dev="proc" ino=21786 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:49:22.794000 audit[4158]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe2ea3983 a2=241 a3=1b6 items=1 ppid=4094 pid=4158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:22.794000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 18:49:22.794000 audit: PATH item=0 name="/dev/fd/63" inode=21223 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:49:22.794000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:49:22.785000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 18:49:22.785000 audit: PATH item=0 name="/dev/fd/63" inode=21210 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:49:22.785000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:49:22.798000 audit[4162]: AVC avc: denied { write } for pid=4162 comm="tee" name="fd" dev="proc" ino=21791 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:49:22.803000 audit[4148]: AVC avc: denied { write } for pid=4148 comm="tee" name="fd" dev="proc" ino=21237 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:49:22.803000 audit[4148]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff2615981 a2=241 a3=1b6 items=1 ppid=4091 pid=4148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:22.803000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 18:49:22.803000 audit: PATH item=0 name="/dev/fd/63" inode=21219 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:49:22.798000 audit[4162]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcc1a1981 a2=241 a3=1b6 items=1 ppid=4092 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:22.798000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 18:49:22.798000 audit: PATH item=0 name="/dev/fd/63" inode=21224 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:49:22.798000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:49:22.803000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:49:22.807000 audit[4156]: AVC avc: denied { write } for pid=4156 comm="tee" name="fd" dev="proc" ino=21799 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 18:49:22.807000 audit[4156]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe84ae972 a2=241 a3=1b6 items=1 ppid=4106 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:22.807000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 18:49:22.807000 audit: PATH item=0 name="/dev/fd/63" inode=21222 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 18:49:22.807000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit: BPF prog-id=148 op=LOAD Oct 2 18:49:23.662000 audit[4234]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff6edda38 a2=70 a3=0 items=0 ppid=4103 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.662000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:49:23.662000 audit: BPF prog-id=148 op=UNLOAD Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.662000 audit: BPF prog-id=149 op=LOAD Oct 2 18:49:23.662000 audit[4234]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff6edda38 a2=70 a3=4a174c items=0 ppid=4103 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.662000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:49:23.663000 audit: BPF prog-id=149 op=UNLOAD Oct 2 18:49:23.663000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.663000 audit[4234]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffff6edda68 a2=70 a3=3026b73f items=0 ppid=4103 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.663000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.669000 audit: BPF prog-id=150 op=LOAD Oct 2 18:49:23.669000 audit[4234]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=fffff6edd9b8 a2=70 a3=3026b759 items=0 ppid=4103 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 18:49:23.675667 (udev-worker)[4235]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:49:23.675806 (udev-worker)[4236]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:49:23.684000 audit[4240]: AVC avc: denied { bpf } for pid=4240 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.684000 audit[4240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff4710358 a2=70 a3=0 items=0 ppid=4103 pid=4240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.684000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 18:49:23.685000 audit[4240]: AVC avc: denied { bpf } for pid=4240 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:23.685000 audit[4240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff4710238 a2=70 a3=2 items=0 ppid=4103 pid=4240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.685000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 18:49:23.704000 audit: BPF prog-id=150 op=UNLOAD Oct 2 18:49:23.922000 audit[4261]: NETFILTER_CFG table=raw:111 family=2 entries=19 op=nft_register_chain pid=4261 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:23.922000 audit[4261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=ffffd589ab40 a2=0 a3=ffff8ca52fa0 items=0 ppid=4103 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.922000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:23.934000 audit[4265]: NETFILTER_CFG table=mangle:112 family=2 entries=19 op=nft_register_chain pid=4265 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:23.934000 audit[4265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=ffffc7ca0310 a2=0 a3=ffffa73c6fa0 items=0 ppid=4103 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.934000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:23.946000 audit[4262]: NETFILTER_CFG table=nat:113 family=2 entries=16 op=nft_register_chain pid=4262 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:23.946000 audit[4262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=ffffd17654c0 a2=0 a3=ffffb54c3fa0 items=0 ppid=4103 pid=4262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.946000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:23.949000 audit[4263]: NETFILTER_CFG table=filter:114 family=2 entries=39 op=nft_register_chain pid=4263 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:23.949000 audit[4263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18472 a0=3 a1=ffffe8a42170 a2=0 a3=ffff84ad2fa0 items=0 ppid=4103 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:23.949000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:24.420184 systemd-networkd[1528]: vxlan.calico: Link UP Oct 2 18:49:24.421103 systemd-networkd[1528]: vxlan.calico: Gained carrier Oct 2 18:49:24.430146 (udev-worker)[4017]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:49:25.599635 env[1725]: time="2023-10-02T18:49:25.599551962Z" level=info msg="StopPodSandbox for \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\"" Oct 2 18:49:25.603239 env[1725]: time="2023-10-02T18:49:25.601129699Z" level=info msg="StopPodSandbox for \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\"" Oct 2 18:49:25.756778 kubelet[2952]: I1002 18:49:25.756225 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-ndj2r" podStartSLOduration=-9.223372010098616e+09 pod.CreationTimestamp="2023-10-02 18:48:59 +0000 UTC" firstStartedPulling="2023-10-02 18:49:00.134004696 +0000 UTC m=+22.226970242" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:49:20.888533445 +0000 UTC m=+42.981499063" watchObservedRunningTime="2023-10-02 18:49:25.756160012 +0000 UTC m=+47.849125558" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.759 [INFO][4313] k8s.go 576: Cleaning up netns ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.760 [INFO][4313] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" iface="eth0" netns="/var/run/netns/cni-2decbcaf-ec08-6a58-aac8-394902925579" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.761 [INFO][4313] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" iface="eth0" netns="/var/run/netns/cni-2decbcaf-ec08-6a58-aac8-394902925579" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.761 [INFO][4313] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" iface="eth0" netns="/var/run/netns/cni-2decbcaf-ec08-6a58-aac8-394902925579" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.761 [INFO][4313] k8s.go 583: Releasing IP address(es) ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.761 [INFO][4313] utils.go 196: Calico CNI releasing IP address ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.860 [INFO][4324] ipam_plugin.go 416: Releasing address using handleID ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" HandleID="k8s-pod-network.f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:25.889934 env[1725]: time="2023-10-02T18:49:25Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:25.889934 env[1725]: time="2023-10-02T18:49:25Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.877 [WARNING][4324] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" HandleID="k8s-pod-network.f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.877 [INFO][4324] ipam_plugin.go 444: Releasing address using workloadID ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" HandleID="k8s-pod-network.f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:25.889934 env[1725]: time="2023-10-02T18:49:25Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:25.889934 env[1725]: 2023-10-02 18:49:25.885 [INFO][4313] k8s.go 589: Teardown processing complete. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:25.894227 systemd[1]: run-netns-cni\x2d2decbcaf\x2dec08\x2d6a58\x2daac8\x2d394902925579.mount: Deactivated successfully. Oct 2 18:49:25.897057 env[1725]: time="2023-10-02T18:49:25.896986849Z" level=info msg="TearDown network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\" successfully" Oct 2 18:49:25.897265 env[1725]: time="2023-10-02T18:49:25.897226765Z" level=info msg="StopPodSandbox for \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\" returns successfully" Oct 2 18:49:25.898680 env[1725]: time="2023-10-02T18:49:25.898619870Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-4877r,Uid:389cc212-0d3c-420e-bfc5-2856182496ad,Namespace:calico-system,Attempt:1,}" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.761 [INFO][4312] k8s.go 576: Cleaning up netns ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.762 [INFO][4312] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" iface="eth0" netns="/var/run/netns/cni-b7fa42a8-cfc0-6f34-6cad-163b737f07aa" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.763 [INFO][4312] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" iface="eth0" netns="/var/run/netns/cni-b7fa42a8-cfc0-6f34-6cad-163b737f07aa" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.763 [INFO][4312] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" iface="eth0" netns="/var/run/netns/cni-b7fa42a8-cfc0-6f34-6cad-163b737f07aa" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.763 [INFO][4312] k8s.go 583: Releasing IP address(es) ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.763 [INFO][4312] utils.go 196: Calico CNI releasing IP address ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.857 [INFO][4325] ipam_plugin.go 416: Releasing address using handleID ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" HandleID="k8s-pod-network.b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:25.925821 env[1725]: time="2023-10-02T18:49:25Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:25.925821 env[1725]: time="2023-10-02T18:49:25Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.913 [WARNING][4325] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" HandleID="k8s-pod-network.b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.914 [INFO][4325] ipam_plugin.go 444: Releasing address using workloadID ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" HandleID="k8s-pod-network.b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:25.925821 env[1725]: time="2023-10-02T18:49:25Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:25.925821 env[1725]: 2023-10-02 18:49:25.923 [INFO][4312] k8s.go 589: Teardown processing complete. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:25.940603 env[1725]: time="2023-10-02T18:49:25.940386373Z" level=info msg="TearDown network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\" successfully" Oct 2 18:49:25.940603 env[1725]: time="2023-10-02T18:49:25.940536385Z" level=info msg="StopPodSandbox for \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\" returns successfully" Oct 2 18:49:25.945723 env[1725]: time="2023-10-02T18:49:25.945648581Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-vqvd7,Uid:5a68613b-90c4-44a5-ae69-ec5249ade95a,Namespace:calico-system,Attempt:1,}" Oct 2 18:49:25.947429 systemd[1]: run-netns-cni\x2db7fa42a8\x2dcfc0\x2d6f34\x2d6cad\x2d163b737f07aa.mount: Deactivated successfully. Oct 2 18:49:26.027235 systemd-networkd[1528]: vxlan.calico: Gained IPv6LL Oct 2 18:49:26.301482 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:49:26.301666 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califa798b917ba: link becomes ready Oct 2 18:49:26.318534 systemd-networkd[1528]: califa798b917ba: Link UP Oct 2 18:49:26.318556 systemd-networkd[1528]: califa798b917ba: Gained carrier Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.106 [INFO][4336] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0 csi-node-driver- calico-system 389cc212-0d3c-420e-bfc5-2856182496ad 678 0 2023-10-02 18:49:12 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:5877dcb8f5 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ip-172-31-30-161 csi-node-driver-4877r eth0 default [] [] [kns.calico-system ksa.calico-system.default] califa798b917ba [] []}} ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Namespace="calico-system" Pod="csi-node-driver-4877r" WorkloadEndpoint="ip--172--31--30--161-k8s-csi--node--driver--4877r-" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.107 [INFO][4336] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Namespace="calico-system" Pod="csi-node-driver-4877r" WorkloadEndpoint="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.207 [INFO][4370] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" HandleID="k8s-pod-network.1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.234 [INFO][4370] ipam_plugin.go 269: Auto assigning IP ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" HandleID="k8s-pod-network.1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004db10), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-30-161", "pod":"csi-node-driver-4877r", "timestamp":"2023-10-02 18:49:26.207056665 +0000 UTC"}, Hostname:"ip-172-31-30-161", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:49:26.357926 env[1725]: time="2023-10-02T18:49:26Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:26.357926 env[1725]: time="2023-10-02T18:49:26Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.234 [INFO][4370] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-161' Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.239 [INFO][4370] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" host="ip-172-31-30-161" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.246 [INFO][4370] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-161" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.254 [INFO][4370] ipam.go 489: Trying affinity for 192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.258 [INFO][4370] ipam.go 155: Attempting to load block cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.264 [INFO][4370] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.264 [INFO][4370] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.128/26 handle="k8s-pod-network.1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" host="ip-172-31-30-161" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.269 [INFO][4370] ipam.go 1682: Creating new handle: k8s-pod-network.1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24 Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.276 [INFO][4370] ipam.go 1203: Writing block in order to claim IPs block=192.168.37.128/26 handle="k8s-pod-network.1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" host="ip-172-31-30-161" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.289 [INFO][4370] ipam.go 1216: Successfully claimed IPs: [192.168.37.129/26] block=192.168.37.128/26 handle="k8s-pod-network.1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" host="ip-172-31-30-161" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.290 [INFO][4370] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.129/26] handle="k8s-pod-network.1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" host="ip-172-31-30-161" Oct 2 18:49:26.357926 env[1725]: time="2023-10-02T18:49:26Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:26.357926 env[1725]: 2023-10-02 18:49:26.290 [INFO][4370] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.37.129/26] IPv6=[] ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" HandleID="k8s-pod-network.1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:26.359532 env[1725]: 2023-10-02 18:49:26.293 [INFO][4336] k8s.go 383: Populated endpoint ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Namespace="calico-system" Pod="csi-node-driver-4877r" WorkloadEndpoint="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"389cc212-0d3c-420e-bfc5-2856182496ad", ResourceVersion:"678", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 49, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"", Pod:"csi-node-driver-4877r", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.37.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califa798b917ba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:26.359532 env[1725]: 2023-10-02 18:49:26.294 [INFO][4336] k8s.go 384: Calico CNI using IPs: [192.168.37.129/32] ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Namespace="calico-system" Pod="csi-node-driver-4877r" WorkloadEndpoint="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:26.359532 env[1725]: 2023-10-02 18:49:26.294 [INFO][4336] dataplane_linux.go 68: Setting the host side veth name to califa798b917ba ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Namespace="calico-system" Pod="csi-node-driver-4877r" WorkloadEndpoint="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:26.359532 env[1725]: 2023-10-02 18:49:26.303 [INFO][4336] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Namespace="calico-system" Pod="csi-node-driver-4877r" WorkloadEndpoint="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:26.359532 env[1725]: 2023-10-02 18:49:26.320 [INFO][4336] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Namespace="calico-system" Pod="csi-node-driver-4877r" WorkloadEndpoint="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"389cc212-0d3c-420e-bfc5-2856182496ad", ResourceVersion:"678", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 49, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24", Pod:"csi-node-driver-4877r", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.37.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califa798b917ba", MAC:"9e:8f:f1:6c:0f:79", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:26.359532 env[1725]: 2023-10-02 18:49:26.343 [INFO][4336] k8s.go 489: Wrote updated endpoint to datastore ContainerID="1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24" Namespace="calico-system" Pod="csi-node-driver-4877r" WorkloadEndpoint="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:26.413278 env[1725]: time="2023-10-02T18:49:26.413083071Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:49:26.413479 env[1725]: time="2023-10-02T18:49:26.413309007Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:49:26.413946 env[1725]: time="2023-10-02T18:49:26.413836516Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:49:26.420130 env[1725]: time="2023-10-02T18:49:26.419958635Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24 pid=4400 runtime=io.containerd.runc.v2 Oct 2 18:49:26.432458 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1a92d43aaac: link becomes ready Oct 2 18:49:26.447956 systemd-networkd[1528]: cali1a92d43aaac: Link UP Oct 2 18:49:26.447981 systemd-networkd[1528]: cali1a92d43aaac: Gained carrier Oct 2 18:49:26.461745 systemd[1]: Started cri-containerd-1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24.scope. Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.138 [INFO][4351] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0 calico-kube-controllers-69c848ddc6- calico-system 5a68613b-90c4-44a5-ae69-ec5249ade95a 679 0 2023-10-02 18:48:59 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:69c848ddc6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-30-161 calico-kube-controllers-69c848ddc6-vqvd7 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali1a92d43aaac [] []}} ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-vqvd7" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.139 [INFO][4351] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-vqvd7" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.286 [INFO][4375] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" HandleID="k8s-pod-network.545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.336 [INFO][4375] ipam_plugin.go 269: Auto assigning IP ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" HandleID="k8s-pod-network.545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40004134e0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-30-161", "pod":"calico-kube-controllers-69c848ddc6-vqvd7", "timestamp":"2023-10-02 18:49:26.286612043 +0000 UTC"}, Hostname:"ip-172-31-30-161", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:49:26.490656 env[1725]: time="2023-10-02T18:49:26Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:26.490656 env[1725]: time="2023-10-02T18:49:26Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.337 [INFO][4375] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-161' Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.345 [INFO][4375] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" host="ip-172-31-30-161" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.363 [INFO][4375] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-161" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.371 [INFO][4375] ipam.go 489: Trying affinity for 192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.378 [INFO][4375] ipam.go 155: Attempting to load block cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.386 [INFO][4375] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.386 [INFO][4375] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.128/26 handle="k8s-pod-network.545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" host="ip-172-31-30-161" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.390 [INFO][4375] ipam.go 1682: Creating new handle: k8s-pod-network.545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.401 [INFO][4375] ipam.go 1203: Writing block in order to claim IPs block=192.168.37.128/26 handle="k8s-pod-network.545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" host="ip-172-31-30-161" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.416 [INFO][4375] ipam.go 1216: Successfully claimed IPs: [192.168.37.130/26] block=192.168.37.128/26 handle="k8s-pod-network.545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" host="ip-172-31-30-161" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.416 [INFO][4375] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.130/26] handle="k8s-pod-network.545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" host="ip-172-31-30-161" Oct 2 18:49:26.490656 env[1725]: time="2023-10-02T18:49:26Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:26.490656 env[1725]: 2023-10-02 18:49:26.416 [INFO][4375] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.37.130/26] IPv6=[] ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" HandleID="k8s-pod-network.545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:26.492007 env[1725]: 2023-10-02 18:49:26.421 [INFO][4351] k8s.go 383: Populated endpoint ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-vqvd7" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5a68613b-90c4-44a5-ae69-ec5249ade95a", ResourceVersion:"679", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"", Pod:"calico-kube-controllers-69c848ddc6-vqvd7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a92d43aaac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:26.492007 env[1725]: 2023-10-02 18:49:26.421 [INFO][4351] k8s.go 384: Calico CNI using IPs: [192.168.37.130/32] ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-vqvd7" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:26.492007 env[1725]: 2023-10-02 18:49:26.421 [INFO][4351] dataplane_linux.go 68: Setting the host side veth name to cali1a92d43aaac ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-vqvd7" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:26.492007 env[1725]: 2023-10-02 18:49:26.435 [INFO][4351] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-vqvd7" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:26.492007 env[1725]: 2023-10-02 18:49:26.448 [INFO][4351] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-vqvd7" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5a68613b-90c4-44a5-ae69-ec5249ade95a", ResourceVersion:"679", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb", Pod:"calico-kube-controllers-69c848ddc6-vqvd7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a92d43aaac", MAC:"ee:36:b8:a4:74:29", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:26.492007 env[1725]: 2023-10-02 18:49:26.474 [INFO][4351] k8s.go 489: Wrote updated endpoint to datastore ContainerID="545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-vqvd7" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:26.570039 kernel: kauditd_printk_skb: 129 callbacks suppressed Oct 2 18:49:26.570235 kernel: audit: type=1325 audit(1696272566.561:1210): table=filter:115 family=2 entries=36 op=nft_register_chain pid=4436 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:26.561000 audit[4436]: NETFILTER_CFG table=filter:115 family=2 entries=36 op=nft_register_chain pid=4436 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:26.561000 audit[4436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19908 a0=3 a1=ffffe7a3ec80 a2=0 a3=ffff8a46efa0 items=0 ppid=4103 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:26.561000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:26.600434 kernel: audit: type=1300 audit(1696272566.561:1210): arch=c00000b7 syscall=211 success=yes exit=19908 a0=3 a1=ffffe7a3ec80 a2=0 a3=ffff8a46efa0 items=0 ppid=4103 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:26.600542 kernel: audit: type=1327 audit(1696272566.561:1210): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:26.607745 env[1725]: time="2023-10-02T18:49:26.600882872Z" level=info msg="StopPodSandbox for \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\"" Oct 2 18:49:26.611629 env[1725]: time="2023-10-02T18:49:26.611377460Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:49:26.611797 env[1725]: time="2023-10-02T18:49:26.611650400Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:49:26.611797 env[1725]: time="2023-10-02T18:49:26.611729684Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:49:26.612713 env[1725]: time="2023-10-02T18:49:26.612591201Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb pid=4446 runtime=io.containerd.runc.v2 Oct 2 18:49:26.695960 systemd[1]: Started cri-containerd-545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb.scope. Oct 2 18:49:26.772507 kernel: audit: type=1400 audit(1696272566.756:1211): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.772687 kernel: audit: type=1400 audit(1696272566.756:1212): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.781231 kernel: audit: type=1400 audit(1696272566.756:1213): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.792056 kernel: audit: type=1400 audit(1696272566.756:1214): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.804363 kernel: audit: type=1400 audit(1696272566.756:1215): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.822235 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 18:49:26.822432 kernel: audit: type=1400 audit(1696272566.756:1216): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit: BPF prog-id=151 op=LOAD Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4446 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:26.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534356630353130303031383533373135383339633537316233656336 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4446 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:26.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534356630353130303031383533373135383339633537316233656336 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.764000 audit: BPF prog-id=152 op=LOAD Oct 2 18:49:26.764000 audit[4455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4446 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:26.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534356630353130303031383533373135383339633537316233656336 Oct 2 18:49:26.773000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.773000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.773000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.773000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.773000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.773000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.773000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.773000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.773000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.773000 audit: BPF prog-id=153 op=LOAD Oct 2 18:49:26.773000 audit[4455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4446 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:26.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534356630353130303031383533373135383339633537316233656336 Oct 2 18:49:26.783000 audit: BPF prog-id=153 op=UNLOAD Oct 2 18:49:26.783000 audit: BPF prog-id=152 op=UNLOAD Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { perfmon } for pid=4455 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit[4455]: AVC avc: denied { bpf } for pid=4455 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.783000 audit: BPF prog-id=154 op=LOAD Oct 2 18:49:26.783000 audit[4455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4446 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:26.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534356630353130303031383533373135383339633537316233656336 Oct 2 18:49:26.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:26.857000 audit[4500]: NETFILTER_CFG table=filter:116 family=2 entries=34 op=nft_register_chain pid=4500 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:26.857000 audit[4500]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18320 a0=3 a1=ffffea4a5200 a2=0 a3=ffff8b9bcfa0 items=0 ppid=4103 pid=4500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:26.857000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:26.937816 env[1725]: time="2023-10-02T18:49:26.937745563Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-4877r,Uid:389cc212-0d3c-420e-bfc5-2856182496ad,Namespace:calico-system,Attempt:1,} returns sandbox id \"1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24\"" Oct 2 18:49:26.948321 env[1725]: time="2023-10-02T18:49:26.948116119Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 18:49:26.988730 env[1725]: time="2023-10-02T18:49:26.988657279Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-vqvd7,Uid:5a68613b-90c4-44a5-ae69-ec5249ade95a,Namespace:calico-system,Attempt:1,} returns sandbox id \"545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb\"" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:26.903 [INFO][4478] k8s.go 576: Cleaning up netns ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:26.905 [INFO][4478] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" iface="eth0" netns="/var/run/netns/cni-4543059c-5752-6fbc-ae13-2834ae369942" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:26.908 [INFO][4478] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" iface="eth0" netns="/var/run/netns/cni-4543059c-5752-6fbc-ae13-2834ae369942" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:26.909 [INFO][4478] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" iface="eth0" netns="/var/run/netns/cni-4543059c-5752-6fbc-ae13-2834ae369942" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:26.918 [INFO][4478] k8s.go 583: Releasing IP address(es) ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:26.918 [INFO][4478] utils.go 196: Calico CNI releasing IP address ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:27.019 [INFO][4508] ipam_plugin.go 416: Releasing address using handleID ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" HandleID="k8s-pod-network.0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.060379 env[1725]: time="2023-10-02T18:49:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:27.060379 env[1725]: time="2023-10-02T18:49:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:27.050 [WARNING][4508] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" HandleID="k8s-pod-network.0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:27.051 [INFO][4508] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" HandleID="k8s-pod-network.0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.060379 env[1725]: time="2023-10-02T18:49:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:27.060379 env[1725]: 2023-10-02 18:49:27.058 [INFO][4478] k8s.go 589: Teardown processing complete. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:27.064704 systemd[1]: run-netns-cni\x2d4543059c\x2d5752\x2d6fbc\x2dae13\x2d2834ae369942.mount: Deactivated successfully. Oct 2 18:49:27.065651 env[1725]: time="2023-10-02T18:49:27.065567815Z" level=info msg="TearDown network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\" successfully" Oct 2 18:49:27.065651 env[1725]: time="2023-10-02T18:49:27.065639575Z" level=info msg="StopPodSandbox for \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\" returns successfully" Oct 2 18:49:27.066696 env[1725]: time="2023-10-02T18:49:27.066608588Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-7kmmp,Uid:534b67ac-3f8e-4174-92b1-e0fd916c7573,Namespace:kube-system,Attempt:1,}" Oct 2 18:49:27.128550 env[1725]: time="2023-10-02T18:49:27.126481023Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:49:27.128550 env[1725]: time="2023-10-02T18:49:27.128026109Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:49:27.131474 kubelet[2952]: E1002 18:49:27.131251 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:49:27.131474 kubelet[2952]: E1002 18:49:27.131347 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:49:27.132278 kubelet[2952]: E1002 18:49:27.131582 2952 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-54n56,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-4877r_calico-system(389cc212-0d3c-420e-bfc5-2856182496ad): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:49:27.135090 env[1725]: time="2023-10-02T18:49:27.133565197Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 18:49:27.368612 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:49:27.368829 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5444e6b4748: link becomes ready Oct 2 18:49:27.379505 systemd-networkd[1528]: cali5444e6b4748: Link UP Oct 2 18:49:27.379526 systemd-networkd[1528]: cali5444e6b4748: Gained carrier Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.211 [INFO][4522] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0 coredns-787d4945fb- kube-system 534b67ac-3f8e-4174-92b1-e0fd916c7573 689 0 2023-10-02 18:48:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-30-161 coredns-787d4945fb-7kmmp eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali5444e6b4748 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Namespace="kube-system" Pod="coredns-787d4945fb-7kmmp" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.211 [INFO][4522] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Namespace="kube-system" Pod="coredns-787d4945fb-7kmmp" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.282 [INFO][4533] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" HandleID="k8s-pod-network.53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.305 [INFO][4533] ipam_plugin.go 269: Auto assigning IP ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" HandleID="k8s-pod-network.53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d6a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-30-161", "pod":"coredns-787d4945fb-7kmmp", "timestamp":"2023-10-02 18:49:27.282717526 +0000 UTC"}, Hostname:"ip-172-31-30-161", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:49:27.413460 env[1725]: time="2023-10-02T18:49:27Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:27.413460 env[1725]: time="2023-10-02T18:49:27Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.305 [INFO][4533] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-161' Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.309 [INFO][4533] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" host="ip-172-31-30-161" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.317 [INFO][4533] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-161" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.327 [INFO][4533] ipam.go 489: Trying affinity for 192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.330 [INFO][4533] ipam.go 155: Attempting to load block cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.334 [INFO][4533] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.335 [INFO][4533] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.128/26 handle="k8s-pod-network.53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" host="ip-172-31-30-161" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.338 [INFO][4533] ipam.go 1682: Creating new handle: k8s-pod-network.53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564 Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.346 [INFO][4533] ipam.go 1203: Writing block in order to claim IPs block=192.168.37.128/26 handle="k8s-pod-network.53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" host="ip-172-31-30-161" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.354 [INFO][4533] ipam.go 1216: Successfully claimed IPs: [192.168.37.131/26] block=192.168.37.128/26 handle="k8s-pod-network.53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" host="ip-172-31-30-161" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.355 [INFO][4533] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.131/26] handle="k8s-pod-network.53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" host="ip-172-31-30-161" Oct 2 18:49:27.413460 env[1725]: time="2023-10-02T18:49:27Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:27.413460 env[1725]: 2023-10-02 18:49:27.358 [INFO][4533] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.37.131/26] IPv6=[] ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" HandleID="k8s-pod-network.53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.414815 env[1725]: 2023-10-02 18:49:27.361 [INFO][4522] k8s.go 383: Populated endpoint ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Namespace="kube-system" Pod="coredns-787d4945fb-7kmmp" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"534b67ac-3f8e-4174-92b1-e0fd916c7573", ResourceVersion:"689", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"", Pod:"coredns-787d4945fb-7kmmp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5444e6b4748", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:27.414815 env[1725]: 2023-10-02 18:49:27.361 [INFO][4522] k8s.go 384: Calico CNI using IPs: [192.168.37.131/32] ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Namespace="kube-system" Pod="coredns-787d4945fb-7kmmp" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.414815 env[1725]: 2023-10-02 18:49:27.361 [INFO][4522] dataplane_linux.go 68: Setting the host side veth name to cali5444e6b4748 ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Namespace="kube-system" Pod="coredns-787d4945fb-7kmmp" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.414815 env[1725]: 2023-10-02 18:49:27.369 [INFO][4522] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Namespace="kube-system" Pod="coredns-787d4945fb-7kmmp" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.414815 env[1725]: 2023-10-02 18:49:27.382 [INFO][4522] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Namespace="kube-system" Pod="coredns-787d4945fb-7kmmp" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"534b67ac-3f8e-4174-92b1-e0fd916c7573", ResourceVersion:"689", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564", Pod:"coredns-787d4945fb-7kmmp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5444e6b4748", MAC:"a2:c8:86:69:95:f8", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:27.414815 env[1725]: 2023-10-02 18:49:27.404 [INFO][4522] k8s.go 489: Wrote updated endpoint to datastore ContainerID="53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564" Namespace="kube-system" Pod="coredns-787d4945fb-7kmmp" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:27.475285 env[1725]: time="2023-10-02T18:49:27.474855432Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:49:27.475285 env[1725]: time="2023-10-02T18:49:27.474948588Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:49:27.475285 env[1725]: time="2023-10-02T18:49:27.474975576Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:49:27.476166 env[1725]: time="2023-10-02T18:49:27.475771561Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564 pid=4561 runtime=io.containerd.runc.v2 Oct 2 18:49:27.522000 audit[4577]: NETFILTER_CFG table=filter:117 family=2 entries=44 op=nft_register_chain pid=4577 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:27.522000 audit[4577]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22284 a0=3 a1=ffffda9fc0a0 a2=0 a3=ffffab1dafa0 items=0 ppid=4103 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.522000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:27.534134 systemd[1]: Started cri-containerd-53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564.scope. Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.586000 audit: BPF prog-id=159 op=LOAD Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4561 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533653462376532376633653631663266363031366636343832333330 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4561 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533653462376532376633653631663266363031366636343832333330 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit: BPF prog-id=160 op=LOAD Oct 2 18:49:27.587000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4561 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533653462376532376633653631663266363031366636343832333330 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit: BPF prog-id=161 op=LOAD Oct 2 18:49:27.587000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4561 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533653462376532376633653631663266363031366636343832333330 Oct 2 18:49:27.587000 audit: BPF prog-id=161 op=UNLOAD Oct 2 18:49:27.587000 audit: BPF prog-id=160 op=UNLOAD Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.587000 audit: BPF prog-id=162 op=LOAD Oct 2 18:49:27.587000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4561 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533653462376532376633653631663266363031366636343832333330 Oct 2 18:49:27.651582 env[1725]: time="2023-10-02T18:49:27.649554287Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-7kmmp,Uid:534b67ac-3f8e-4174-92b1-e0fd916c7573,Namespace:kube-system,Attempt:1,} returns sandbox id \"53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564\"" Oct 2 18:49:27.661873 env[1725]: time="2023-10-02T18:49:27.661776461Z" level=info msg="CreateContainer within sandbox \"53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 18:49:27.685930 env[1725]: time="2023-10-02T18:49:27.685858385Z" level=info msg="CreateContainer within sandbox \"53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"bb035ee6121bae631ef3ae0ad893b1b0e6164193973a3587ae01b263f09fb8fb\"" Oct 2 18:49:27.689250 env[1725]: time="2023-10-02T18:49:27.687457076Z" level=info msg="StartContainer for \"bb035ee6121bae631ef3ae0ad893b1b0e6164193973a3587ae01b263f09fb8fb\"" Oct 2 18:49:27.737689 systemd[1]: Started cri-containerd-bb035ee6121bae631ef3ae0ad893b1b0e6164193973a3587ae01b263f09fb8fb.scope. Oct 2 18:49:27.755174 systemd-networkd[1528]: califa798b917ba: Gained IPv6LL Oct 2 18:49:27.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.791000 audit: BPF prog-id=163 op=LOAD Oct 2 18:49:27.792000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.792000 audit[4604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4561 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262303335656536313231626165363331656633616530616438393362 Oct 2 18:49:27.793000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.793000 audit[4604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4561 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262303335656536313231626165363331656633616530616438393362 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.794000 audit: BPF prog-id=164 op=LOAD Oct 2 18:49:27.794000 audit[4604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4561 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262303335656536313231626165363331656633616530616438393362 Oct 2 18:49:27.796000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.796000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.796000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.796000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.796000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.796000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.796000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.796000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.796000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.796000 audit: BPF prog-id=165 op=LOAD Oct 2 18:49:27.796000 audit[4604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4561 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262303335656536313231626165363331656633616530616438393362 Oct 2 18:49:27.799000 audit: BPF prog-id=165 op=UNLOAD Oct 2 18:49:27.799000 audit: BPF prog-id=164 op=UNLOAD Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { perfmon } for pid=4604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit[4604]: AVC avc: denied { bpf } for pid=4604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:27.799000 audit: BPF prog-id=166 op=LOAD Oct 2 18:49:27.799000 audit[4604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4561 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:27.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262303335656536313231626165363331656633616530616438393362 Oct 2 18:49:27.840651 env[1725]: time="2023-10-02T18:49:27.840521050Z" level=info msg="StartContainer for \"bb035ee6121bae631ef3ae0ad893b1b0e6164193973a3587ae01b263f09fb8fb\" returns successfully" Oct 2 18:49:28.141000 audit[4666]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4666 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:28.141000 audit[4666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffc3ad1cb0 a2=0 a3=ffff9d45b6c0 items=0 ppid=3156 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:28.141000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:28.143000 audit[4666]: NETFILTER_CFG table=nat:119 family=2 entries=30 op=nft_register_rule pid=4666 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:28.143000 audit[4666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8836 a0=3 a1=ffffc3ad1cb0 a2=0 a3=ffff9d45b6c0 items=0 ppid=3156 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:28.143000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:28.202752 systemd-networkd[1528]: cali1a92d43aaac: Gained IPv6LL Oct 2 18:49:28.331320 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount303156550.mount: Deactivated successfully. Oct 2 18:49:28.603144 env[1725]: time="2023-10-02T18:49:28.601845687Z" level=info msg="StopPodSandbox for \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\"" Oct 2 18:49:28.794779 kubelet[2952]: I1002 18:49:28.794283 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-7kmmp" podStartSLOduration=37.794209471 pod.CreationTimestamp="2023-10-02 18:48:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:49:27.898978299 +0000 UTC m=+49.991943953" watchObservedRunningTime="2023-10-02 18:49:28.794209471 +0000 UTC m=+50.887175053" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:28.798 [INFO][4685] k8s.go 576: Cleaning up netns ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:28.798 [INFO][4685] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" iface="eth0" netns="/var/run/netns/cni-b55d1a31-a9e9-0bc7-2334-a34fd502bafc" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:28.799 [INFO][4685] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" iface="eth0" netns="/var/run/netns/cni-b55d1a31-a9e9-0bc7-2334-a34fd502bafc" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:28.799 [INFO][4685] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" iface="eth0" netns="/var/run/netns/cni-b55d1a31-a9e9-0bc7-2334-a34fd502bafc" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:28.799 [INFO][4685] k8s.go 583: Releasing IP address(es) ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:28.800 [INFO][4685] utils.go 196: Calico CNI releasing IP address ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:28.977 [INFO][4692] ipam_plugin.go 416: Releasing address using handleID ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" HandleID="k8s-pod-network.8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.007565 env[1725]: time="2023-10-02T18:49:28Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:29.007565 env[1725]: time="2023-10-02T18:49:28Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:28.998 [WARNING][4692] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" HandleID="k8s-pod-network.8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:28.999 [INFO][4692] ipam_plugin.go 444: Releasing address using workloadID ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" HandleID="k8s-pod-network.8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.007565 env[1725]: time="2023-10-02T18:49:29Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:29.007565 env[1725]: 2023-10-02 18:49:29.004 [INFO][4685] k8s.go 589: Teardown processing complete. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:29.012571 systemd[1]: run-netns-cni\x2db55d1a31\x2da9e9\x2d0bc7\x2d2334\x2da34fd502bafc.mount: Deactivated successfully. Oct 2 18:49:29.012974 env[1725]: time="2023-10-02T18:49:29.012911015Z" level=info msg="TearDown network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\" successfully" Oct 2 18:49:29.013180 env[1725]: time="2023-10-02T18:49:29.013137456Z" level=info msg="StopPodSandbox for \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\" returns successfully" Oct 2 18:49:29.015752 env[1725]: time="2023-10-02T18:49:29.015030028Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-5bdzb,Uid:0c46469d-7c78-48bb-8731-b6dc698251b5,Namespace:kube-system,Attempt:1,}" Oct 2 18:49:29.200000 audit[4735]: NETFILTER_CFG table=filter:120 family=2 entries=9 op=nft_register_rule pid=4735 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:29.200000 audit[4735]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffe3fc91e0 a2=0 a3=ffffb74046c0 items=0 ppid=3156 pid=4735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:29.200000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:29.213000 audit[4735]: NETFILTER_CFG table=nat:121 family=2 entries=51 op=nft_register_chain pid=4735 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:29.213000 audit[4735]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19324 a0=3 a1=ffffe3fc91e0 a2=0 a3=ffffb74046c0 items=0 ppid=3156 pid=4735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:29.213000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:29.356214 systemd-networkd[1528]: cali5444e6b4748: Gained IPv6LL Oct 2 18:49:29.435778 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:49:29.435938 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7517369d39c: link becomes ready Oct 2 18:49:29.444314 systemd-networkd[1528]: cali7517369d39c: Link UP Oct 2 18:49:29.444334 systemd-networkd[1528]: cali7517369d39c: Gained carrier Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.223 [INFO][4704] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0 coredns-787d4945fb- kube-system 0c46469d-7c78-48bb-8731-b6dc698251b5 708 0 2023-10-02 18:48:51 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-30-161 coredns-787d4945fb-5bdzb eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali7517369d39c [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Namespace="kube-system" Pod="coredns-787d4945fb-5bdzb" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.224 [INFO][4704] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Namespace="kube-system" Pod="coredns-787d4945fb-5bdzb" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.315 [INFO][4738] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" HandleID="k8s-pod-network.f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.341 [INFO][4738] ipam_plugin.go 269: Auto assigning IP ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" HandleID="k8s-pod-network.f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000448cc0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-30-161", "pod":"coredns-787d4945fb-5bdzb", "timestamp":"2023-10-02 18:49:29.315713244 +0000 UTC"}, Hostname:"ip-172-31-30-161", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:49:29.480379 env[1725]: time="2023-10-02T18:49:29Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:29.480379 env[1725]: time="2023-10-02T18:49:29Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.342 [INFO][4738] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-161' Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.347 [INFO][4738] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" host="ip-172-31-30-161" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.361 [INFO][4738] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-161" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.371 [INFO][4738] ipam.go 489: Trying affinity for 192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.376 [INFO][4738] ipam.go 155: Attempting to load block cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.383 [INFO][4738] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.383 [INFO][4738] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.128/26 handle="k8s-pod-network.f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" host="ip-172-31-30-161" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.388 [INFO][4738] ipam.go 1682: Creating new handle: k8s-pod-network.f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501 Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.399 [INFO][4738] ipam.go 1203: Writing block in order to claim IPs block=192.168.37.128/26 handle="k8s-pod-network.f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" host="ip-172-31-30-161" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.417 [INFO][4738] ipam.go 1216: Successfully claimed IPs: [192.168.37.132/26] block=192.168.37.128/26 handle="k8s-pod-network.f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" host="ip-172-31-30-161" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.417 [INFO][4738] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.132/26] handle="k8s-pod-network.f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" host="ip-172-31-30-161" Oct 2 18:49:29.480379 env[1725]: time="2023-10-02T18:49:29Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:29.480379 env[1725]: 2023-10-02 18:49:29.418 [INFO][4738] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.37.132/26] IPv6=[] ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" HandleID="k8s-pod-network.f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.487687 env[1725]: 2023-10-02 18:49:29.423 [INFO][4704] k8s.go 383: Populated endpoint ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Namespace="kube-system" Pod="coredns-787d4945fb-5bdzb" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"0c46469d-7c78-48bb-8731-b6dc698251b5", ResourceVersion:"708", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"", Pod:"coredns-787d4945fb-5bdzb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7517369d39c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:29.487687 env[1725]: 2023-10-02 18:49:29.423 [INFO][4704] k8s.go 384: Calico CNI using IPs: [192.168.37.132/32] ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Namespace="kube-system" Pod="coredns-787d4945fb-5bdzb" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.487687 env[1725]: 2023-10-02 18:49:29.423 [INFO][4704] dataplane_linux.go 68: Setting the host side veth name to cali7517369d39c ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Namespace="kube-system" Pod="coredns-787d4945fb-5bdzb" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.487687 env[1725]: 2023-10-02 18:49:29.436 [INFO][4704] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Namespace="kube-system" Pod="coredns-787d4945fb-5bdzb" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.487687 env[1725]: 2023-10-02 18:49:29.443 [INFO][4704] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Namespace="kube-system" Pod="coredns-787d4945fb-5bdzb" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"0c46469d-7c78-48bb-8731-b6dc698251b5", ResourceVersion:"708", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501", Pod:"coredns-787d4945fb-5bdzb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7517369d39c", MAC:"12:f8:5e:f6:69:26", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:29.487687 env[1725]: 2023-10-02 18:49:29.469 [INFO][4704] k8s.go 489: Wrote updated endpoint to datastore ContainerID="f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501" Namespace="kube-system" Pod="coredns-787d4945fb-5bdzb" WorkloadEndpoint="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:29.607000 audit[4755]: NETFILTER_CFG table=filter:122 family=2 entries=38 op=nft_register_chain pid=4755 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:29.607000 audit[4755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19088 a0=3 a1=ffffed18e740 a2=0 a3=ffff8ab31fa0 items=0 ppid=4103 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:29.607000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:29.674519 env[1725]: time="2023-10-02T18:49:29.674014319Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:49:29.674519 env[1725]: time="2023-10-02T18:49:29.674098943Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:49:29.674519 env[1725]: time="2023-10-02T18:49:29.674130815Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:49:29.674943 env[1725]: time="2023-10-02T18:49:29.674668440Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501 pid=4764 runtime=io.containerd.runc.v2 Oct 2 18:49:29.776753 systemd[1]: Started cri-containerd-f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501.scope. Oct 2 18:49:29.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.861000 audit: BPF prog-id=167 op=LOAD Oct 2 18:49:29.862000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.862000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4764 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:29.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366463363366363930323636653364353032663166353261653461 Oct 2 18:49:29.862000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.862000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4764 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:29.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366463363366363930323636653364353032663166353261653461 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit: BPF prog-id=168 op=LOAD Oct 2 18:49:29.863000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4764 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:29.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366463363366363930323636653364353032663166353261653461 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit: BPF prog-id=169 op=LOAD Oct 2 18:49:29.863000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4764 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:29.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366463363366363930323636653364353032663166353261653461 Oct 2 18:49:29.863000 audit: BPF prog-id=169 op=UNLOAD Oct 2 18:49:29.863000 audit: BPF prog-id=168 op=UNLOAD Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:29.863000 audit: BPF prog-id=170 op=LOAD Oct 2 18:49:29.863000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4764 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:29.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639366463363366363930323636653364353032663166353261653461 Oct 2 18:49:30.012687 systemd[1]: run-containerd-runc-k8s.io-f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501-runc.YCJtwq.mount: Deactivated successfully. Oct 2 18:49:30.025158 env[1725]: time="2023-10-02T18:49:30.025100074Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-5bdzb,Uid:0c46469d-7c78-48bb-8731-b6dc698251b5,Namespace:kube-system,Attempt:1,} returns sandbox id \"f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501\"" Oct 2 18:49:30.032535 env[1725]: time="2023-10-02T18:49:30.032466580Z" level=info msg="CreateContainer within sandbox \"f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 18:49:30.080668 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1468443649.mount: Deactivated successfully. Oct 2 18:49:30.087119 env[1725]: time="2023-10-02T18:49:30.087032045Z" level=info msg="CreateContainer within sandbox \"f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"02d149ed86c0da1db38c7a65d8362eb8dace48a18a6ff270d30568084f61927d\"" Oct 2 18:49:30.090528 env[1725]: time="2023-10-02T18:49:30.090358873Z" level=info msg="StartContainer for \"02d149ed86c0da1db38c7a65d8362eb8dace48a18a6ff270d30568084f61927d\"" Oct 2 18:49:30.099351 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount101357095.mount: Deactivated successfully. Oct 2 18:49:30.213391 systemd[1]: Started cri-containerd-02d149ed86c0da1db38c7a65d8362eb8dace48a18a6ff270d30568084f61927d.scope. Oct 2 18:49:30.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.278000 audit: BPF prog-id=171 op=LOAD Oct 2 18:49:30.279000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.279000 audit[4822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4764 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:30.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032643134396564383663306461316462333863376136356438333632 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4764 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:30.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032643134396564383663306461316462333863376136356438333632 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.282000 audit: BPF prog-id=172 op=LOAD Oct 2 18:49:30.282000 audit[4822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4764 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:30.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032643134396564383663306461316462333863376136356438333632 Oct 2 18:49:30.286000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.286000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.286000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.286000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.286000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.286000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.286000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.286000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.286000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.286000 audit: BPF prog-id=173 op=LOAD Oct 2 18:49:30.286000 audit[4822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4764 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:30.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032643134396564383663306461316462333863376136356438333632 Oct 2 18:49:30.288000 audit: BPF prog-id=173 op=UNLOAD Oct 2 18:49:30.288000 audit: BPF prog-id=172 op=UNLOAD Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:30.290000 audit: BPF prog-id=174 op=LOAD Oct 2 18:49:30.290000 audit[4822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4764 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:30.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032643134396564383663306461316462333863376136356438333632 Oct 2 18:49:30.367527 env[1725]: time="2023-10-02T18:49:30.363459993Z" level=info msg="StartContainer for \"02d149ed86c0da1db38c7a65d8362eb8dace48a18a6ff270d30568084f61927d\" returns successfully" Oct 2 18:49:30.528673 env[1725]: time="2023-10-02T18:49:30.528499408Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:30.534477 env[1725]: time="2023-10-02T18:49:30.534371478Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2a83e28de36778d89892266990cc390b1519b82e6d9724ca705c0d1e700b5804,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:30.537564 env[1725]: time="2023-10-02T18:49:30.537507242Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:30.542480 env[1725]: time="2023-10-02T18:49:30.542354882Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" returns image reference \"sha256:2a83e28de36778d89892266990cc390b1519b82e6d9724ca705c0d1e700b5804\"" Oct 2 18:49:30.544322 env[1725]: time="2023-10-02T18:49:30.544258831Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:b764feb1777655aabce5988324b69b412d23e087436ee2414dff893a158fcdef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:30.546676 env[1725]: time="2023-10-02T18:49:30.546571080Z" level=info msg="CreateContainer within sandbox \"545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Oct 2 18:49:30.547184 env[1725]: time="2023-10-02T18:49:30.544309399Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 18:49:30.578955 env[1725]: time="2023-10-02T18:49:30.578885599Z" level=info msg="CreateContainer within sandbox \"545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400\"" Oct 2 18:49:30.580993 env[1725]: time="2023-10-02T18:49:30.580916160Z" level=info msg="StartContainer for \"61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400\"" Oct 2 18:49:30.676662 systemd[1]: Started cri-containerd-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400.scope. Oct 2 18:49:30.734429 env[1725]: time="2023-10-02T18:49:30.734331207Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:49:30.736630 env[1725]: time="2023-10-02T18:49:30.736539476Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:49:30.738333 kubelet[2952]: E1002 18:49:30.737226 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:49:30.738333 kubelet[2952]: E1002 18:49:30.737349 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:49:30.738333 kubelet[2952]: E1002 18:49:30.738071 2952 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-54n56,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-4877r_calico-system(389cc212-0d3c-420e-bfc5-2856182496ad): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:49:30.738333 kubelet[2952]: E1002 18:49:30.738227 2952 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-4877r" podUID=389cc212-0d3c-420e-bfc5-2856182496ad Oct 2 18:49:30.942642 kubelet[2952]: E1002 18:49:30.942594 2952 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-4877r" podUID=389cc212-0d3c-420e-bfc5-2856182496ad Oct 2 18:49:31.043649 kubelet[2952]: I1002 18:49:31.043590 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-5bdzb" podStartSLOduration=40.043525067 pod.CreationTimestamp="2023-10-02 18:48:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:49:31.001750793 +0000 UTC m=+53.094716699" watchObservedRunningTime="2023-10-02 18:49:31.043525067 +0000 UTC m=+53.136490649" Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.088000 audit: BPF prog-id=175 op=LOAD Oct 2 18:49:31.089000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.089000 audit[4867]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4446 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623233343131353933363465626232656365326461303531333231 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4446 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623233343131353933363465626232656365326461303531333231 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.090000 audit: BPF prog-id=176 op=LOAD Oct 2 18:49:31.090000 audit[4867]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4446 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623233343131353933363465626232656365326461303531333231 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit: BPF prog-id=177 op=LOAD Oct 2 18:49:31.092000 audit[4867]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4446 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623233343131353933363465626232656365326461303531333231 Oct 2 18:49:31.092000 audit: BPF prog-id=177 op=UNLOAD Oct 2 18:49:31.092000 audit: BPF prog-id=176 op=UNLOAD Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { perfmon } for pid=4867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit[4867]: AVC avc: denied { bpf } for pid=4867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:31.092000 audit: BPF prog-id=178 op=LOAD Oct 2 18:49:31.092000 audit[4867]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4446 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631623233343131353933363465626232656365326461303531333231 Oct 2 18:49:31.148144 env[1725]: time="2023-10-02T18:49:31.148031577Z" level=info msg="StartContainer for \"61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400\" returns successfully" Oct 2 18:49:31.339673 systemd-networkd[1528]: cali7517369d39c: Gained IPv6LL Oct 2 18:49:31.402000 audit[4920]: NETFILTER_CFG table=filter:123 family=2 entries=6 op=nft_register_rule pid=4920 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:31.402000 audit[4920]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc1effd70 a2=0 a3=ffff96a026c0 items=0 ppid=3156 pid=4920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.402000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:31.410000 audit[4920]: NETFILTER_CFG table=nat:124 family=2 entries=60 op=nft_register_rule pid=4920 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:31.410000 audit[4920]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19324 a0=3 a1=ffffc1effd70 a2=0 a3=ffff96a026c0 items=0 ppid=3156 pid=4920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.410000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:31.679778 kernel: kauditd_printk_skb: 485 callbacks suppressed Oct 2 18:49:31.679929 kernel: audit: type=1325 audit(1696272571.670:1337): table=filter:125 family=2 entries=6 op=nft_register_rule pid=4950 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:31.670000 audit[4950]: NETFILTER_CFG table=filter:125 family=2 entries=6 op=nft_register_rule pid=4950 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:31.695757 kernel: audit: type=1300 audit(1696272571.670:1337): arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffd5962100 a2=0 a3=ffff9198a6c0 items=0 ppid=3156 pid=4950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.670000 audit[4950]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffd5962100 a2=0 a3=ffff9198a6c0 items=0 ppid=3156 pid=4950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.670000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:31.703419 kernel: audit: type=1327 audit(1696272571.670:1337): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:31.722000 audit[4950]: NETFILTER_CFG table=nat:126 family=2 entries=72 op=nft_register_chain pid=4950 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:31.730445 kernel: audit: type=1325 audit(1696272571.722:1338): table=nat:126 family=2 entries=72 op=nft_register_chain pid=4950 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:31.722000 audit[4950]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffd5962100 a2=0 a3=ffff9198a6c0 items=0 ppid=3156 pid=4950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.744448 kernel: audit: type=1300 audit(1696272571.722:1338): arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffd5962100 a2=0 a3=ffff9198a6c0 items=0 ppid=3156 pid=4950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:31.722000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:31.751566 kernel: audit: type=1327 audit(1696272571.722:1338): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:32.153451 kubelet[2952]: I1002 18:49:32.153368 2952 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-69c848ddc6-vqvd7" podStartSLOduration=-9.223372003701468e+09 pod.CreationTimestamp="2023-10-02 18:48:59 +0000 UTC" firstStartedPulling="2023-10-02 18:49:26.991834943 +0000 UTC m=+49.084800489" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:49:31.970725437 +0000 UTC m=+54.063690995" watchObservedRunningTime="2023-10-02 18:49:32.153307396 +0000 UTC m=+54.246272954" Oct 2 18:49:33.017000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.017000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.037956 kernel: audit: type=1400 audit(1696272573.017:1339): avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.038161 kernel: audit: type=1400 audit(1696272573.017:1340): avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.038234 kernel: audit: type=1300 audit(1696272573.017:1340): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002319460 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:49:33.017000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002319460 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:49:33.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:33.061323 kernel: audit: type=1327 audit(1696272573.017:1340): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:33.017000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002194060 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:49:33.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:33.300537 systemd[1]: run-containerd-runc-k8s.io-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400-runc.S30W0E.mount: Deactivated successfully. Oct 2 18:49:33.567000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.567000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.567000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4002f447a0 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:49:33.567000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:33.567000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40091848d0 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:49:33.567000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:33.568000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.568000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4009184960 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:49:33.568000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:33.575000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.575000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.575000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4009184a80 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:49:33.575000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:33.575000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4002f44800 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:49:33.575000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:33.580000 audit[2610]: AVC avc: denied { watch } for pid=2610 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:33.580000 audit[2610]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4009184ae0 a2=fc6 a3=0 items=0 ppid=2469 pid=2610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c500,c626 key=(null) Oct 2 18:49:33.580000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E313631002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:37.651012 kubelet[2952]: I1002 18:49:37.650944 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:49:37.665102 systemd[1]: Created slice kubepods-besteffort-pod18f40cd9_1e9a_4f77_bca8_6b4fcfae2cd7.slice. Oct 2 18:49:37.674880 kubelet[2952]: W1002 18:49:37.674828 2952 reflector.go:424] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:49:37.674880 kubelet[2952]: E1002 18:49:37.674883 2952 reflector.go:140] object-"calico-apiserver"/"calico-apiserver-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:49:37.675356 kubelet[2952]: W1002 18:49:37.675308 2952 reflector.go:424] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:49:37.675356 kubelet[2952]: E1002 18:49:37.675362 2952 reflector.go:140] object-"calico-apiserver"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-161" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-30-161' and this object Oct 2 18:49:37.710233 kubelet[2952]: I1002 18:49:37.710113 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jzw7k\" (UniqueName: \"kubernetes.io/projected/18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7-kube-api-access-jzw7k\") pod \"calico-apiserver-546b97946d-gvwkp\" (UID: \"18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7\") " pod="calico-apiserver/calico-apiserver-546b97946d-gvwkp" Oct 2 18:49:37.710233 kubelet[2952]: I1002 18:49:37.710211 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7-calico-apiserver-certs\") pod \"calico-apiserver-546b97946d-gvwkp\" (UID: \"18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7\") " pod="calico-apiserver/calico-apiserver-546b97946d-gvwkp" Oct 2 18:49:37.712038 kubelet[2952]: I1002 18:49:37.711974 2952 topology_manager.go:210] "Topology Admit Handler" Oct 2 18:49:37.723166 systemd[1]: Created slice kubepods-besteffort-pod8ff03378_bde6_4bde_9de5_232c63f1de77.slice. Oct 2 18:49:37.811262 kubelet[2952]: I1002 18:49:37.811207 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/8ff03378-bde6-4bde-9de5-232c63f1de77-calico-apiserver-certs\") pod \"calico-apiserver-546b97946d-72zq8\" (UID: \"8ff03378-bde6-4bde-9de5-232c63f1de77\") " pod="calico-apiserver/calico-apiserver-546b97946d-72zq8" Oct 2 18:49:37.811475 kubelet[2952]: I1002 18:49:37.811292 2952 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-947vz\" (UniqueName: \"kubernetes.io/projected/8ff03378-bde6-4bde-9de5-232c63f1de77-kube-api-access-947vz\") pod \"calico-apiserver-546b97946d-72zq8\" (UID: \"8ff03378-bde6-4bde-9de5-232c63f1de77\") " pod="calico-apiserver/calico-apiserver-546b97946d-72zq8" Oct 2 18:49:38.142000 audit[5028]: NETFILTER_CFG table=filter:127 family=2 entries=7 op=nft_register_rule pid=5028 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:38.144935 kernel: kauditd_printk_skb: 20 callbacks suppressed Oct 2 18:49:38.145123 kernel: audit: type=1325 audit(1696272578.142:1347): table=filter:127 family=2 entries=7 op=nft_register_rule pid=5028 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:38.142000 audit[5028]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=fffffb2d2020 a2=0 a3=ffff914cb6c0 items=0 ppid=3156 pid=5028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:38.164657 kernel: audit: type=1300 audit(1696272578.142:1347): arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=fffffb2d2020 a2=0 a3=ffff914cb6c0 items=0 ppid=3156 pid=5028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:38.142000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:38.171535 kernel: audit: type=1327 audit(1696272578.142:1347): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:38.153000 audit[5028]: NETFILTER_CFG table=nat:128 family=2 entries=78 op=nft_register_rule pid=5028 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:38.181651 kernel: audit: type=1325 audit(1696272578.153:1348): table=nat:128 family=2 entries=78 op=nft_register_rule pid=5028 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:38.153000 audit[5028]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=fffffb2d2020 a2=0 a3=ffff914cb6c0 items=0 ppid=3156 pid=5028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:38.194876 kernel: audit: type=1300 audit(1696272578.153:1348): arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=fffffb2d2020 a2=0 a3=ffff914cb6c0 items=0 ppid=3156 pid=5028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:38.153000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:38.201950 kernel: audit: type=1327 audit(1696272578.153:1348): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:38.212492 env[1725]: time="2023-10-02T18:49:38.210781433Z" level=info msg="StopPodSandbox for \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\"" Oct 2 18:49:38.536645 env[1725]: 2023-10-02 18:49:38.349 [WARNING][5047] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"389cc212-0d3c-420e-bfc5-2856182496ad", ResourceVersion:"734", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 49, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24", Pod:"csi-node-driver-4877r", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.37.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califa798b917ba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:38.536645 env[1725]: 2023-10-02 18:49:38.350 [INFO][5047] k8s.go 576: Cleaning up netns ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:38.536645 env[1725]: 2023-10-02 18:49:38.351 [INFO][5047] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" iface="eth0" netns="" Oct 2 18:49:38.536645 env[1725]: 2023-10-02 18:49:38.351 [INFO][5047] k8s.go 583: Releasing IP address(es) ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:38.536645 env[1725]: 2023-10-02 18:49:38.351 [INFO][5047] utils.go 196: Calico CNI releasing IP address ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:38.536645 env[1725]: 2023-10-02 18:49:38.506 [INFO][5057] ipam_plugin.go 416: Releasing address using handleID ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" HandleID="k8s-pod-network.f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:38.536645 env[1725]: time="2023-10-02T18:49:38Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:38.536645 env[1725]: time="2023-10-02T18:49:38Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:38.536645 env[1725]: 2023-10-02 18:49:38.525 [WARNING][5057] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" HandleID="k8s-pod-network.f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:38.536645 env[1725]: 2023-10-02 18:49:38.526 [INFO][5057] ipam_plugin.go 444: Releasing address using workloadID ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" HandleID="k8s-pod-network.f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:38.536645 env[1725]: time="2023-10-02T18:49:38Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:38.536645 env[1725]: 2023-10-02 18:49:38.533 [INFO][5047] k8s.go 589: Teardown processing complete. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:38.537897 env[1725]: time="2023-10-02T18:49:38.537838684Z" level=info msg="TearDown network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\" successfully" Oct 2 18:49:38.538065 env[1725]: time="2023-10-02T18:49:38.538029437Z" level=info msg="StopPodSandbox for \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\" returns successfully" Oct 2 18:49:38.539097 env[1725]: time="2023-10-02T18:49:38.539032737Z" level=info msg="RemovePodSandbox for \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\"" Oct 2 18:49:38.539305 env[1725]: time="2023-10-02T18:49:38.539099170Z" level=info msg="Forcibly stopping sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\"" Oct 2 18:49:38.582000 audit[5085]: NETFILTER_CFG table=filter:129 family=2 entries=8 op=nft_register_rule pid=5085 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:38.582000 audit[5085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=ffffe7960420 a2=0 a3=ffff86a876c0 items=0 ppid=3156 pid=5085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:38.590427 kernel: audit: type=1325 audit(1696272578.582:1349): table=filter:129 family=2 entries=8 op=nft_register_rule pid=5085 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:38.623993 kernel: audit: type=1300 audit(1696272578.582:1349): arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=ffffe7960420 a2=0 a3=ffff86a876c0 items=0 ppid=3156 pid=5085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:38.624150 kernel: audit: type=1327 audit(1696272578.582:1349): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:38.582000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:38.624000 audit[5085]: NETFILTER_CFG table=nat:130 family=2 entries=78 op=nft_register_rule pid=5085 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:38.649445 kernel: audit: type=1325 audit(1696272578.624:1350): table=nat:130 family=2 entries=78 op=nft_register_rule pid=5085 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:38.624000 audit[5085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffe7960420 a2=0 a3=ffff86a876c0 items=0 ppid=3156 pid=5085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:38.624000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:38.815528 kubelet[2952]: E1002 18:49:38.813689 2952 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 18:49:38.821376 kubelet[2952]: E1002 18:49:38.816301 2952 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7-calico-apiserver-certs podName:18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7 nodeName:}" failed. No retries permitted until 2023-10-02 18:49:39.316261502 +0000 UTC m=+61.409227048 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7-calico-apiserver-certs") pod "calico-apiserver-546b97946d-gvwkp" (UID: "18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7") : failed to sync secret cache: timed out waiting for the condition Oct 2 18:49:38.923526 kubelet[2952]: E1002 18:49:38.923474 2952 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 18:49:38.924017 kubelet[2952]: E1002 18:49:38.923980 2952 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/8ff03378-bde6-4bde-9de5-232c63f1de77-calico-apiserver-certs podName:8ff03378-bde6-4bde-9de5-232c63f1de77 nodeName:}" failed. No retries permitted until 2023-10-02 18:49:39.423941795 +0000 UTC m=+61.516907425 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/8ff03378-bde6-4bde-9de5-232c63f1de77-calico-apiserver-certs") pod "calico-apiserver-546b97946d-72zq8" (UID: "8ff03378-bde6-4bde-9de5-232c63f1de77") : failed to sync secret cache: timed out waiting for the condition Oct 2 18:49:38.937569 env[1725]: 2023-10-02 18:49:38.726 [WARNING][5096] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"389cc212-0d3c-420e-bfc5-2856182496ad", ResourceVersion:"734", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 49, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"1f8e4beeb575b0fe52b2c262524ca474c95c42aa2ba900295c6594fa512dbd24", Pod:"csi-node-driver-4877r", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.37.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califa798b917ba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:38.937569 env[1725]: 2023-10-02 18:49:38.727 [INFO][5096] k8s.go 576: Cleaning up netns ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:38.937569 env[1725]: 2023-10-02 18:49:38.728 [INFO][5096] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" iface="eth0" netns="" Oct 2 18:49:38.937569 env[1725]: 2023-10-02 18:49:38.728 [INFO][5096] k8s.go 583: Releasing IP address(es) ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:38.937569 env[1725]: 2023-10-02 18:49:38.728 [INFO][5096] utils.go 196: Calico CNI releasing IP address ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:38.937569 env[1725]: 2023-10-02 18:49:38.873 [INFO][5103] ipam_plugin.go 416: Releasing address using handleID ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" HandleID="k8s-pod-network.f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:38.937569 env[1725]: time="2023-10-02T18:49:38Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:38.937569 env[1725]: time="2023-10-02T18:49:38Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:38.937569 env[1725]: 2023-10-02 18:49:38.910 [WARNING][5103] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" HandleID="k8s-pod-network.f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:38.937569 env[1725]: 2023-10-02 18:49:38.911 [INFO][5103] ipam_plugin.go 444: Releasing address using workloadID ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" HandleID="k8s-pod-network.f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Workload="ip--172--31--30--161-k8s-csi--node--driver--4877r-eth0" Oct 2 18:49:38.937569 env[1725]: time="2023-10-02T18:49:38Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:38.937569 env[1725]: 2023-10-02 18:49:38.933 [INFO][5096] k8s.go 589: Teardown processing complete. ContainerID="f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc" Oct 2 18:49:38.938868 env[1725]: time="2023-10-02T18:49:38.938817435Z" level=info msg="TearDown network for sandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\" successfully" Oct 2 18:49:38.947949 env[1725]: time="2023-10-02T18:49:38.947881952Z" level=info msg="RemovePodSandbox \"f9adf2de96a1e1dd55f37f56688a24e7d5fb2772fbe1f41454bb6bb9867e05bc\" returns successfully" Oct 2 18:49:38.961689 env[1725]: time="2023-10-02T18:49:38.960156592Z" level=info msg="StopPodSandbox for \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\"" Oct 2 18:49:39.208289 env[1725]: 2023-10-02 18:49:39.115 [WARNING][5125] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"0c46469d-7c78-48bb-8731-b6dc698251b5", ResourceVersion:"739", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501", Pod:"coredns-787d4945fb-5bdzb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7517369d39c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:39.208289 env[1725]: 2023-10-02 18:49:39.116 [INFO][5125] k8s.go 576: Cleaning up netns ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:39.208289 env[1725]: 2023-10-02 18:49:39.116 [INFO][5125] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" iface="eth0" netns="" Oct 2 18:49:39.208289 env[1725]: 2023-10-02 18:49:39.117 [INFO][5125] k8s.go 583: Releasing IP address(es) ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:39.208289 env[1725]: 2023-10-02 18:49:39.117 [INFO][5125] utils.go 196: Calico CNI releasing IP address ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:39.208289 env[1725]: 2023-10-02 18:49:39.182 [INFO][5131] ipam_plugin.go 416: Releasing address using handleID ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" HandleID="k8s-pod-network.8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:39.208289 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:39.208289 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:39.208289 env[1725]: 2023-10-02 18:49:39.198 [WARNING][5131] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" HandleID="k8s-pod-network.8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:39.208289 env[1725]: 2023-10-02 18:49:39.198 [INFO][5131] ipam_plugin.go 444: Releasing address using workloadID ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" HandleID="k8s-pod-network.8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:39.208289 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:39.208289 env[1725]: 2023-10-02 18:49:39.204 [INFO][5125] k8s.go 589: Teardown processing complete. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:39.209389 env[1725]: time="2023-10-02T18:49:39.209328592Z" level=info msg="TearDown network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\" successfully" Oct 2 18:49:39.209663 env[1725]: time="2023-10-02T18:49:39.209615898Z" level=info msg="StopPodSandbox for \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\" returns successfully" Oct 2 18:49:39.210610 env[1725]: time="2023-10-02T18:49:39.210508198Z" level=info msg="RemovePodSandbox for \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\"" Oct 2 18:49:39.210765 env[1725]: time="2023-10-02T18:49:39.210656099Z" level=info msg="Forcibly stopping sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\"" Oct 2 18:49:39.410884 env[1725]: 2023-10-02 18:49:39.313 [WARNING][5150] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"0c46469d-7c78-48bb-8731-b6dc698251b5", ResourceVersion:"739", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"f96dc63f690266e3d502f1f52ae4ab291c6290dd0feb101c5a198c1a0ed56501", Pod:"coredns-787d4945fb-5bdzb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7517369d39c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:39.410884 env[1725]: 2023-10-02 18:49:39.314 [INFO][5150] k8s.go 576: Cleaning up netns ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:39.410884 env[1725]: 2023-10-02 18:49:39.314 [INFO][5150] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" iface="eth0" netns="" Oct 2 18:49:39.410884 env[1725]: 2023-10-02 18:49:39.314 [INFO][5150] k8s.go 583: Releasing IP address(es) ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:39.410884 env[1725]: 2023-10-02 18:49:39.315 [INFO][5150] utils.go 196: Calico CNI releasing IP address ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:39.410884 env[1725]: 2023-10-02 18:49:39.386 [INFO][5156] ipam_plugin.go 416: Releasing address using handleID ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" HandleID="k8s-pod-network.8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:39.410884 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:39.410884 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:39.410884 env[1725]: 2023-10-02 18:49:39.402 [WARNING][5156] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" HandleID="k8s-pod-network.8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:39.410884 env[1725]: 2023-10-02 18:49:39.402 [INFO][5156] ipam_plugin.go 444: Releasing address using workloadID ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" HandleID="k8s-pod-network.8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--5bdzb-eth0" Oct 2 18:49:39.410884 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:39.410884 env[1725]: 2023-10-02 18:49:39.408 [INFO][5150] k8s.go 589: Teardown processing complete. ContainerID="8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79" Oct 2 18:49:39.412346 env[1725]: time="2023-10-02T18:49:39.410937403Z" level=info msg="TearDown network for sandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\" successfully" Oct 2 18:49:39.416679 env[1725]: time="2023-10-02T18:49:39.416579206Z" level=info msg="RemovePodSandbox \"8221de97d75cf039dd81046cef771a7ac5f2f1653801640534a5e8f9a8589a79\" returns successfully" Oct 2 18:49:39.417354 env[1725]: time="2023-10-02T18:49:39.417295141Z" level=info msg="StopPodSandbox for \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\"" Oct 2 18:49:39.474947 env[1725]: time="2023-10-02T18:49:39.474063956Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-546b97946d-gvwkp,Uid:18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7,Namespace:calico-apiserver,Attempt:0,}" Oct 2 18:49:39.530532 env[1725]: time="2023-10-02T18:49:39.530465306Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-546b97946d-72zq8,Uid:8ff03378-bde6-4bde-9de5-232c63f1de77,Namespace:calico-apiserver,Attempt:0,}" Oct 2 18:49:39.854781 env[1725]: 2023-10-02 18:49:39.586 [WARNING][5176] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5a68613b-90c4-44a5-ae69-ec5249ade95a", ResourceVersion:"755", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb", Pod:"calico-kube-controllers-69c848ddc6-vqvd7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a92d43aaac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:39.854781 env[1725]: 2023-10-02 18:49:39.587 [INFO][5176] k8s.go 576: Cleaning up netns ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:39.854781 env[1725]: 2023-10-02 18:49:39.587 [INFO][5176] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" iface="eth0" netns="" Oct 2 18:49:39.854781 env[1725]: 2023-10-02 18:49:39.589 [INFO][5176] k8s.go 583: Releasing IP address(es) ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:39.854781 env[1725]: 2023-10-02 18:49:39.589 [INFO][5176] utils.go 196: Calico CNI releasing IP address ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:39.854781 env[1725]: 2023-10-02 18:49:39.809 [INFO][5204] ipam_plugin.go 416: Releasing address using handleID ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" HandleID="k8s-pod-network.b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:39.854781 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:39.854781 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:39.854781 env[1725]: 2023-10-02 18:49:39.843 [WARNING][5204] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" HandleID="k8s-pod-network.b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:39.854781 env[1725]: 2023-10-02 18:49:39.843 [INFO][5204] ipam_plugin.go 444: Releasing address using workloadID ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" HandleID="k8s-pod-network.b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:39.854781 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:39.854781 env[1725]: 2023-10-02 18:49:39.851 [INFO][5176] k8s.go 589: Teardown processing complete. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:39.856540 env[1725]: time="2023-10-02T18:49:39.856476934Z" level=info msg="TearDown network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\" successfully" Oct 2 18:49:39.856766 env[1725]: time="2023-10-02T18:49:39.856721747Z" level=info msg="StopPodSandbox for \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\" returns successfully" Oct 2 18:49:39.857985 env[1725]: time="2023-10-02T18:49:39.857923325Z" level=info msg="RemovePodSandbox for \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\"" Oct 2 18:49:39.858202 env[1725]: time="2023-10-02T18:49:39.858001865Z" level=info msg="Forcibly stopping sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\"" Oct 2 18:49:40.025037 systemd[1]: run-containerd-runc-k8s.io-6eb32345eaef09a6630d7d7b51feabc85e4d430c266d7f8588a904cfde77f3cf-runc.AXFc8I.mount: Deactivated successfully. Oct 2 18:49:40.069785 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:49:40.069974 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia2cc372c7fe: link becomes ready Oct 2 18:49:40.125383 (udev-worker)[5261]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:49:40.128590 systemd-networkd[1528]: calia2cc372c7fe: Link UP Oct 2 18:49:40.128605 systemd-networkd[1528]: calia2cc372c7fe: Gained carrier Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:39.664 [INFO][5182] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0 calico-apiserver-546b97946d- calico-apiserver 18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7 809 0 2023-10-02 18:49:37 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:546b97946d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-30-161 calico-apiserver-546b97946d-gvwkp eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calia2cc372c7fe [] []}} ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-gvwkp" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:39.666 [INFO][5182] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-gvwkp" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:39.899 [INFO][5210] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" HandleID="k8s-pod-network.3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Workload="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:39.944 [INFO][5210] ipam_plugin.go 269: Auto assigning IP ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" HandleID="k8s-pod-network.3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Workload="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000102830), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-30-161", "pod":"calico-apiserver-546b97946d-gvwkp", "timestamp":"2023-10-02 18:49:39.899351243 +0000 UTC"}, Hostname:"ip-172-31-30-161", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:49:40.164045 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:40.164045 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:39.944 [INFO][5210] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-161' Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:39.950 [INFO][5210] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" host="ip-172-31-30-161" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:39.973 [INFO][5210] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-161" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:39.987 [INFO][5210] ipam.go 489: Trying affinity for 192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:39.995 [INFO][5210] ipam.go 155: Attempting to load block cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:40.001 [INFO][5210] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:40.001 [INFO][5210] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.128/26 handle="k8s-pod-network.3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" host="ip-172-31-30-161" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:40.007 [INFO][5210] ipam.go 1682: Creating new handle: k8s-pod-network.3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:40.026 [INFO][5210] ipam.go 1203: Writing block in order to claim IPs block=192.168.37.128/26 handle="k8s-pod-network.3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" host="ip-172-31-30-161" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:40.054 [INFO][5210] ipam.go 1216: Successfully claimed IPs: [192.168.37.133/26] block=192.168.37.128/26 handle="k8s-pod-network.3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" host="ip-172-31-30-161" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:40.054 [INFO][5210] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.133/26] handle="k8s-pod-network.3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" host="ip-172-31-30-161" Oct 2 18:49:40.164045 env[1725]: time="2023-10-02T18:49:40Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:40.164045 env[1725]: 2023-10-02 18:49:40.054 [INFO][5210] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.37.133/26] IPv6=[] ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" HandleID="k8s-pod-network.3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Workload="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" Oct 2 18:49:40.165495 env[1725]: 2023-10-02 18:49:40.057 [INFO][5182] k8s.go 383: Populated endpoint ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-gvwkp" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0", GenerateName:"calico-apiserver-546b97946d-", Namespace:"calico-apiserver", SelfLink:"", UID:"18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7", ResourceVersion:"809", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 49, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"546b97946d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"", Pod:"calico-apiserver-546b97946d-gvwkp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia2cc372c7fe", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:40.165495 env[1725]: 2023-10-02 18:49:40.058 [INFO][5182] k8s.go 384: Calico CNI using IPs: [192.168.37.133/32] ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-gvwkp" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" Oct 2 18:49:40.165495 env[1725]: 2023-10-02 18:49:40.058 [INFO][5182] dataplane_linux.go 68: Setting the host side veth name to calia2cc372c7fe ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-gvwkp" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" Oct 2 18:49:40.165495 env[1725]: 2023-10-02 18:49:40.071 [INFO][5182] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-gvwkp" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" Oct 2 18:49:40.165495 env[1725]: 2023-10-02 18:49:40.129 [INFO][5182] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-gvwkp" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0", GenerateName:"calico-apiserver-546b97946d-", Namespace:"calico-apiserver", SelfLink:"", UID:"18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7", ResourceVersion:"809", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 49, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"546b97946d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b", Pod:"calico-apiserver-546b97946d-gvwkp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia2cc372c7fe", MAC:"a2:65:ee:fd:3e:c2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:40.165495 env[1725]: 2023-10-02 18:49:40.149 [INFO][5182] k8s.go 489: Wrote updated endpoint to datastore ContainerID="3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-gvwkp" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--gvwkp-eth0" Oct 2 18:49:40.211546 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali86f8f33f50e: link becomes ready Oct 2 18:49:40.251554 systemd-networkd[1528]: cali86f8f33f50e: Link UP Oct 2 18:49:40.251570 systemd-networkd[1528]: cali86f8f33f50e: Gained carrier Oct 2 18:49:40.310867 env[1725]: time="2023-10-02T18:49:40.296000589Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:49:40.310867 env[1725]: time="2023-10-02T18:49:40.296083606Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:49:40.310867 env[1725]: time="2023-10-02T18:49:40.296111782Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:49:40.310867 env[1725]: time="2023-10-02T18:49:40.299357234Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b pid=5295 runtime=io.containerd.runc.v2 Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:39.750 [INFO][5194] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0 calico-apiserver-546b97946d- calico-apiserver 8ff03378-bde6-4bde-9de5-232c63f1de77 817 0 2023-10-02 18:49:37 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:546b97946d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-30-161 calico-apiserver-546b97946d-72zq8 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali86f8f33f50e [] []}} ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-72zq8" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:39.752 [INFO][5194] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-72zq8" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:39.909 [INFO][5216] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" HandleID="k8s-pod-network.d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Workload="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:39.953 [INFO][5216] ipam_plugin.go 269: Auto assigning IP ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" HandleID="k8s-pod-network.d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Workload="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000415fc0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-30-161", "pod":"calico-apiserver-546b97946d-72zq8", "timestamp":"2023-10-02 18:49:39.906980927 +0000 UTC"}, Hostname:"ip-172-31-30-161", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 18:49:40.313040 env[1725]: time="2023-10-02T18:49:39Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:40.313040 env[1725]: time="2023-10-02T18:49:40Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.054 [INFO][5216] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-161' Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.063 [INFO][5216] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" host="ip-172-31-30-161" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.077 [INFO][5216] ipam.go 372: Looking up existing affinities for host host="ip-172-31-30-161" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.097 [INFO][5216] ipam.go 489: Trying affinity for 192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.104 [INFO][5216] ipam.go 155: Attempting to load block cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.111 [INFO][5216] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.37.128/26 host="ip-172-31-30-161" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.111 [INFO][5216] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.37.128/26 handle="k8s-pod-network.d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" host="ip-172-31-30-161" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.115 [INFO][5216] ipam.go 1682: Creating new handle: k8s-pod-network.d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569 Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.143 [INFO][5216] ipam.go 1203: Writing block in order to claim IPs block=192.168.37.128/26 handle="k8s-pod-network.d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" host="ip-172-31-30-161" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.191 [INFO][5216] ipam.go 1216: Successfully claimed IPs: [192.168.37.134/26] block=192.168.37.128/26 handle="k8s-pod-network.d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" host="ip-172-31-30-161" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.191 [INFO][5216] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.37.134/26] handle="k8s-pod-network.d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" host="ip-172-31-30-161" Oct 2 18:49:40.313040 env[1725]: time="2023-10-02T18:49:40Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:40.313040 env[1725]: 2023-10-02 18:49:40.191 [INFO][5216] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.37.134/26] IPv6=[] ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" HandleID="k8s-pod-network.d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Workload="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" Oct 2 18:49:40.314643 env[1725]: 2023-10-02 18:49:40.201 [INFO][5194] k8s.go 383: Populated endpoint ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-72zq8" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0", GenerateName:"calico-apiserver-546b97946d-", Namespace:"calico-apiserver", SelfLink:"", UID:"8ff03378-bde6-4bde-9de5-232c63f1de77", ResourceVersion:"817", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 49, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"546b97946d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"", Pod:"calico-apiserver-546b97946d-72zq8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali86f8f33f50e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:40.314643 env[1725]: 2023-10-02 18:49:40.201 [INFO][5194] k8s.go 384: Calico CNI using IPs: [192.168.37.134/32] ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-72zq8" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" Oct 2 18:49:40.314643 env[1725]: 2023-10-02 18:49:40.201 [INFO][5194] dataplane_linux.go 68: Setting the host side veth name to cali86f8f33f50e ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-72zq8" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" Oct 2 18:49:40.314643 env[1725]: 2023-10-02 18:49:40.222 [INFO][5194] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-72zq8" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" Oct 2 18:49:40.314643 env[1725]: 2023-10-02 18:49:40.253 [INFO][5194] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-72zq8" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0", GenerateName:"calico-apiserver-546b97946d-", Namespace:"calico-apiserver", SelfLink:"", UID:"8ff03378-bde6-4bde-9de5-232c63f1de77", ResourceVersion:"817", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 49, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"546b97946d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569", Pod:"calico-apiserver-546b97946d-72zq8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.37.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali86f8f33f50e", MAC:"ba:38:3c:28:cf:b6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:40.314643 env[1725]: 2023-10-02 18:49:40.289 [INFO][5194] k8s.go 489: Wrote updated endpoint to datastore ContainerID="d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569" Namespace="calico-apiserver" Pod="calico-apiserver-546b97946d-72zq8" WorkloadEndpoint="ip--172--31--30--161-k8s-calico--apiserver--546b97946d--72zq8-eth0" Oct 2 18:49:40.414485 systemd[1]: Started cri-containerd-3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b.scope. Oct 2 18:49:40.459178 env[1725]: time="2023-10-02T18:49:40.459017899Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:49:40.459178 env[1725]: time="2023-10-02T18:49:40.459097856Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:49:40.459178 env[1725]: time="2023-10-02T18:49:40.459125312Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:49:40.456000 audit[5327]: NETFILTER_CFG table=filter:131 family=2 entries=59 op=nft_register_chain pid=5327 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:40.456000 audit[5327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29292 a0=3 a1=ffffca02a560 a2=0 a3=ffffa1851fa0 items=0 ppid=4103 pid=5327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.456000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:40.468320 env[1725]: time="2023-10-02T18:49:40.468121949Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569 pid=5337 runtime=io.containerd.runc.v2 Oct 2 18:49:40.542837 env[1725]: 2023-10-02 18:49:40.265 [WARNING][5239] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"5a68613b-90c4-44a5-ae69-ec5249ade95a", ResourceVersion:"755", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"545f0510001853715839c571b3ec6491d4181265dba0426cdf5bdfe4720782cb", Pod:"calico-kube-controllers-69c848ddc6-vqvd7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.37.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1a92d43aaac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:40.542837 env[1725]: 2023-10-02 18:49:40.266 [INFO][5239] k8s.go 576: Cleaning up netns ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:40.542837 env[1725]: 2023-10-02 18:49:40.266 [INFO][5239] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" iface="eth0" netns="" Oct 2 18:49:40.542837 env[1725]: 2023-10-02 18:49:40.266 [INFO][5239] k8s.go 583: Releasing IP address(es) ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:40.542837 env[1725]: 2023-10-02 18:49:40.266 [INFO][5239] utils.go 196: Calico CNI releasing IP address ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:40.542837 env[1725]: 2023-10-02 18:49:40.506 [INFO][5299] ipam_plugin.go 416: Releasing address using handleID ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" HandleID="k8s-pod-network.b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:40.542837 env[1725]: time="2023-10-02T18:49:40Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:40.542837 env[1725]: time="2023-10-02T18:49:40Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:40.542837 env[1725]: 2023-10-02 18:49:40.527 [WARNING][5299] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" HandleID="k8s-pod-network.b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:40.542837 env[1725]: 2023-10-02 18:49:40.527 [INFO][5299] ipam_plugin.go 444: Releasing address using workloadID ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" HandleID="k8s-pod-network.b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Workload="ip--172--31--30--161-k8s-calico--kube--controllers--69c848ddc6--vqvd7-eth0" Oct 2 18:49:40.542837 env[1725]: time="2023-10-02T18:49:40Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:40.542837 env[1725]: 2023-10-02 18:49:40.535 [INFO][5239] k8s.go 589: Teardown processing complete. ContainerID="b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8" Oct 2 18:49:40.544056 env[1725]: time="2023-10-02T18:49:40.543993384Z" level=info msg="TearDown network for sandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\" successfully" Oct 2 18:49:40.556396 env[1725]: time="2023-10-02T18:49:40.556315669Z" level=info msg="RemovePodSandbox \"b87040c77be9996ca937baa61091dad521edb815be3156da970e926e2d47eba8\" returns successfully" Oct 2 18:49:40.557144 systemd[1]: Started cri-containerd-d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569.scope. Oct 2 18:49:40.562366 env[1725]: time="2023-10-02T18:49:40.562274155Z" level=info msg="StopPodSandbox for \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\"" Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.595000 audit: BPF prog-id=179 op=LOAD Oct 2 18:49:40.597000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.597000 audit[5314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=5295 pid=5314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353362336433653530313765613434306665383861653930383361 Oct 2 18:49:40.598000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.598000 audit[5314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=5295 pid=5314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.598000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353362336433653530313765613434306665383861653930383361 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.599000 audit: BPF prog-id=180 op=LOAD Oct 2 18:49:40.599000 audit[5314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=5295 pid=5314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353362336433653530313765613434306665383861653930383361 Oct 2 18:49:40.607000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.607000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.607000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.607000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.607000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.607000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.607000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.607000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.607000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.607000 audit: BPF prog-id=181 op=LOAD Oct 2 18:49:40.607000 audit[5314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=5295 pid=5314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353362336433653530313765613434306665383861653930383361 Oct 2 18:49:40.607000 audit: BPF prog-id=181 op=UNLOAD Oct 2 18:49:40.607000 audit: BPF prog-id=180 op=UNLOAD Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { perfmon } for pid=5314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit[5314]: AVC avc: denied { bpf } for pid=5314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.608000 audit: BPF prog-id=182 op=LOAD Oct 2 18:49:40.608000 audit[5314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=5295 pid=5314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353362336433653530313765613434306665383861653930383361 Oct 2 18:49:40.622000 audit[5377]: NETFILTER_CFG table=filter:132 family=2 entries=50 op=nft_register_chain pid=5377 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 18:49:40.622000 audit[5377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24496 a0=3 a1=ffffda0978e0 a2=0 a3=ffffa25a8fa0 items=0 ppid=4103 pid=5377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.622000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 18:49:40.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.679000 audit: BPF prog-id=183 op=LOAD Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5337 pid=5354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431626265303765356638333238313636383438363261383065653734 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5337 pid=5354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431626265303765356638333238313636383438363261383065653734 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit: BPF prog-id=184 op=LOAD Oct 2 18:49:40.681000 audit[5354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5337 pid=5354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431626265303765356638333238313636383438363261383065653734 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.681000 audit: BPF prog-id=185 op=LOAD Oct 2 18:49:40.681000 audit[5354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5337 pid=5354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431626265303765356638333238313636383438363261383065653734 Oct 2 18:49:40.681000 audit: BPF prog-id=185 op=UNLOAD Oct 2 18:49:40.685000 audit: BPF prog-id=184 op=UNLOAD Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { perfmon } for pid=5354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit[5354]: AVC avc: denied { bpf } for pid=5354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.685000 audit: BPF prog-id=186 op=LOAD Oct 2 18:49:40.685000 audit[5354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5337 pid=5354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:40.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431626265303765356638333238313636383438363261383065653734 Oct 2 18:49:40.822040 env[1725]: time="2023-10-02T18:49:40.821977280Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-546b97946d-gvwkp,Uid:18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"3353b3d3e5017ea440fe88ae9083a373fee2170d2a186783acd103b554e3014b\"" Oct 2 18:49:40.833527 env[1725]: time="2023-10-02T18:49:40.831682821Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 18:49:40.842947 env[1725]: time="2023-10-02T18:49:40.842790604Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-546b97946d-72zq8,Uid:8ff03378-bde6-4bde-9de5-232c63f1de77,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"d1bbe07e5f832816684862a80ee7409ad1757a01618fbe4c8c43105756fc0569\"" Oct 2 18:49:40.943805 env[1725]: 2023-10-02 18:49:40.807 [WARNING][5387] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"534b67ac-3f8e-4174-92b1-e0fd916c7573", ResourceVersion:"710", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564", Pod:"coredns-787d4945fb-7kmmp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5444e6b4748", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:40.943805 env[1725]: 2023-10-02 18:49:40.809 [INFO][5387] k8s.go 576: Cleaning up netns ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:40.943805 env[1725]: 2023-10-02 18:49:40.809 [INFO][5387] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" iface="eth0" netns="" Oct 2 18:49:40.943805 env[1725]: 2023-10-02 18:49:40.814 [INFO][5387] k8s.go 583: Releasing IP address(es) ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:40.943805 env[1725]: 2023-10-02 18:49:40.814 [INFO][5387] utils.go 196: Calico CNI releasing IP address ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:40.943805 env[1725]: 2023-10-02 18:49:40.919 [INFO][5415] ipam_plugin.go 416: Releasing address using handleID ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" HandleID="k8s-pod-network.0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:40.943805 env[1725]: time="2023-10-02T18:49:40Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:40.943805 env[1725]: time="2023-10-02T18:49:40Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:40.943805 env[1725]: 2023-10-02 18:49:40.935 [WARNING][5415] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" HandleID="k8s-pod-network.0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:40.943805 env[1725]: 2023-10-02 18:49:40.935 [INFO][5415] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" HandleID="k8s-pod-network.0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:40.943805 env[1725]: time="2023-10-02T18:49:40Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:40.943805 env[1725]: 2023-10-02 18:49:40.940 [INFO][5387] k8s.go 589: Teardown processing complete. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:40.943805 env[1725]: time="2023-10-02T18:49:40.943313198Z" level=info msg="TearDown network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\" successfully" Oct 2 18:49:40.943805 env[1725]: time="2023-10-02T18:49:40.943360442Z" level=info msg="StopPodSandbox for \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\" returns successfully" Oct 2 18:49:40.944938 env[1725]: time="2023-10-02T18:49:40.944896954Z" level=info msg="RemovePodSandbox for \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\"" Oct 2 18:49:40.945057 env[1725]: time="2023-10-02T18:49:40.944958298Z" level=info msg="Forcibly stopping sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\"" Oct 2 18:49:41.031697 env[1725]: time="2023-10-02T18:49:41.031623554Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:49:41.033511 env[1725]: time="2023-10-02T18:49:41.033432755Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:49:41.035851 kubelet[2952]: E1002 18:49:41.035794 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:49:41.036573 kubelet[2952]: E1002 18:49:41.035884 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:49:41.036573 kubelet[2952]: E1002 18:49:41.036217 2952 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jzw7k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-546b97946d-gvwkp_calico-apiserver(18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:49:41.036573 kubelet[2952]: E1002 18:49:41.036488 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-546b97946d-gvwkp" podUID=18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7 Oct 2 18:49:41.037424 env[1725]: time="2023-10-02T18:49:41.037345088Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 18:49:41.163103 env[1725]: 2023-10-02 18:49:41.055 [WARNING][5433] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"534b67ac-3f8e-4174-92b1-e0fd916c7573", ResourceVersion:"710", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 18, 48, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-161", ContainerID:"53e4b7e27f3e61f2f6016f64823304617a58ac90f0df71b3ebb67bb8025b1564", Pod:"coredns-787d4945fb-7kmmp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.37.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5444e6b4748", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 18:49:41.163103 env[1725]: 2023-10-02 18:49:41.056 [INFO][5433] k8s.go 576: Cleaning up netns ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:41.163103 env[1725]: 2023-10-02 18:49:41.057 [INFO][5433] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" iface="eth0" netns="" Oct 2 18:49:41.163103 env[1725]: 2023-10-02 18:49:41.057 [INFO][5433] k8s.go 583: Releasing IP address(es) ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:41.163103 env[1725]: 2023-10-02 18:49:41.057 [INFO][5433] utils.go 196: Calico CNI releasing IP address ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:41.163103 env[1725]: 2023-10-02 18:49:41.137 [INFO][5439] ipam_plugin.go 416: Releasing address using handleID ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" HandleID="k8s-pod-network.0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:41.163103 env[1725]: time="2023-10-02T18:49:41Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 18:49:41.163103 env[1725]: time="2023-10-02T18:49:41Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 18:49:41.163103 env[1725]: 2023-10-02 18:49:41.154 [WARNING][5439] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" HandleID="k8s-pod-network.0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:41.163103 env[1725]: 2023-10-02 18:49:41.154 [INFO][5439] ipam_plugin.go 444: Releasing address using workloadID ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" HandleID="k8s-pod-network.0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Workload="ip--172--31--30--161-k8s-coredns--787d4945fb--7kmmp-eth0" Oct 2 18:49:41.163103 env[1725]: time="2023-10-02T18:49:41Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 18:49:41.163103 env[1725]: 2023-10-02 18:49:41.160 [INFO][5433] k8s.go 589: Teardown processing complete. ContainerID="0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a" Oct 2 18:49:41.164269 env[1725]: time="2023-10-02T18:49:41.163147491Z" level=info msg="TearDown network for sandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\" successfully" Oct 2 18:49:41.169246 env[1725]: time="2023-10-02T18:49:41.169144846Z" level=info msg="RemovePodSandbox \"0cae9f624612d53e0414fe9aba42bf7b55b5ea39c269df8f5ea5981b918be74a\" returns successfully" Oct 2 18:49:41.234286 env[1725]: time="2023-10-02T18:49:41.234062424Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:49:41.236119 env[1725]: time="2023-10-02T18:49:41.236020570Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:49:41.236868 kubelet[2952]: E1002 18:49:41.236828 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:49:41.237054 kubelet[2952]: E1002 18:49:41.236893 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:49:41.237149 kubelet[2952]: E1002 18:49:41.237048 2952 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-947vz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-546b97946d-72zq8_calico-apiserver(8ff03378-bde6-4bde-9de5-232c63f1de77): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:49:41.237149 kubelet[2952]: E1002 18:49:41.237116 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-546b97946d-72zq8" podUID=8ff03378-bde6-4bde-9de5-232c63f1de77 Oct 2 18:49:41.386848 systemd-networkd[1528]: cali86f8f33f50e: Gained IPv6LL Oct 2 18:49:41.578566 systemd-networkd[1528]: calia2cc372c7fe: Gained IPv6LL Oct 2 18:49:42.020100 kubelet[2952]: E1002 18:49:42.019575 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-546b97946d-gvwkp" podUID=18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7 Oct 2 18:49:42.020100 kubelet[2952]: E1002 18:49:42.019682 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-546b97946d-72zq8" podUID=8ff03378-bde6-4bde-9de5-232c63f1de77 Oct 2 18:49:42.205000 audit[5472]: NETFILTER_CFG table=filter:133 family=2 entries=8 op=nft_register_rule pid=5472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:42.205000 audit[5472]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=ffffd7d728b0 a2=0 a3=ffff9c0336c0 items=0 ppid=3156 pid=5472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.205000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:42.210000 audit[5472]: NETFILTER_CFG table=nat:134 family=2 entries=78 op=nft_register_rule pid=5472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:42.210000 audit[5472]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=ffffd7d728b0 a2=0 a3=ffff9c0336c0 items=0 ppid=3156 pid=5472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.210000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:42.327000 audit[5498]: NETFILTER_CFG table=filter:135 family=2 entries=8 op=nft_register_rule pid=5498 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:42.327000 audit[5498]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2620 a0=3 a1=fffff4e1c9a0 a2=0 a3=ffff919086c0 items=0 ppid=3156 pid=5498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.327000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:42.331000 audit[5498]: NETFILTER_CFG table=nat:136 family=2 entries=78 op=nft_register_rule pid=5498 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:49:42.331000 audit[5498]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24988 a0=3 a1=fffff4e1c9a0 a2=0 a3=ffff919086c0 items=0 ppid=3156 pid=5498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.331000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:49:42.599072 env[1725]: time="2023-10-02T18:49:42.598921815Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 18:49:42.787124 env[1725]: time="2023-10-02T18:49:42.787035385Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:49:42.788622 env[1725]: time="2023-10-02T18:49:42.788525361Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:49:42.788964 kubelet[2952]: E1002 18:49:42.788931 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:49:42.789597 kubelet[2952]: E1002 18:49:42.789572 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:49:42.789851 kubelet[2952]: E1002 18:49:42.789826 2952 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-54n56,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-4877r_calico-system(389cc212-0d3c-420e-bfc5-2856182496ad): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:49:42.792096 env[1725]: time="2023-10-02T18:49:42.791593790Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 18:49:42.985898 env[1725]: time="2023-10-02T18:49:42.985732701Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:49:42.987820 env[1725]: time="2023-10-02T18:49:42.987657500Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:49:42.988236 kubelet[2952]: E1002 18:49:42.988199 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:49:42.988347 kubelet[2952]: E1002 18:49:42.988265 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:49:42.988466 kubelet[2952]: E1002 18:49:42.988390 2952 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-54n56,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-4877r_calico-system(389cc212-0d3c-420e-bfc5-2856182496ad): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:49:42.988662 kubelet[2952]: E1002 18:49:42.988510 2952 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-4877r" podUID=389cc212-0d3c-420e-bfc5-2856182496ad Oct 2 18:49:43.277865 systemd[1]: run-containerd-runc-k8s.io-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400-runc.5gLmDM.mount: Deactivated successfully. Oct 2 18:49:44.269974 systemd[1]: run-containerd-runc-k8s.io-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400-runc.kC2bgD.mount: Deactivated successfully. Oct 2 18:49:46.346844 kernel: kauditd_printk_skb: 134 callbacks suppressed Oct 2 18:49:46.347025 kernel: audit: type=1130 audit(1696272586.335:1393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.161:22-139.178.89.65:44914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:46.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.161:22-139.178.89.65:44914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:46.335614 systemd[1]: Started sshd@7-172.31.30.161:22-139.178.89.65:44914.service. Oct 2 18:49:46.528000 audit[5549]: USER_ACCT pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:46.529056 sshd[5549]: Accepted publickey for core from 139.178.89.65 port 44914 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:46.540549 kernel: audit: type=1101 audit(1696272586.528:1394): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:46.541000 audit[5549]: CRED_ACQ pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:46.547690 sshd[5549]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:46.557671 kernel: audit: type=1103 audit(1696272586.541:1395): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:46.557814 kernel: audit: type=1006 audit(1696272586.546:1396): pid=5549 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 18:49:46.546000 audit[5549]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff932e840 a2=3 a3=1 items=0 ppid=1 pid=5549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:46.568646 kernel: audit: type=1300 audit(1696272586.546:1396): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff932e840 a2=3 a3=1 items=0 ppid=1 pid=5549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:46.546000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:49:46.572528 kernel: audit: type=1327 audit(1696272586.546:1396): proctitle=737368643A20636F7265205B707269765D Oct 2 18:49:46.574992 systemd-logind[1716]: New session 8 of user core. Oct 2 18:49:46.577093 systemd[1]: Started session-8.scope. Oct 2 18:49:46.588000 audit[5549]: USER_START pid=5549 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:46.603548 kernel: audit: type=1105 audit(1696272586.588:1397): pid=5549 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:46.603000 audit[5551]: CRED_ACQ pid=5551 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:46.615488 kernel: audit: type=1103 audit(1696272586.603:1398): pid=5551 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:46.784000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:46.784000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:46.810188 kernel: audit: type=1400 audit(1696272586.784:1399): avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:46.810318 kernel: audit: type=1400 audit(1696272586.784:1400): avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:46.784000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002cac980 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:49:46.784000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:46.794000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:46.794000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002cacba0 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:49:46.794000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:46.784000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002b82f00 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:49:46.784000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:46.794000 audit[2648]: AVC avc: denied { watch } for pid=2648 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:46.794000 audit[2648]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002cacbc0 a2=fc6 a3=0 items=0 ppid=2490 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c285 key=(null) Oct 2 18:49:46.794000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:46.992741 sshd[5549]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:46.995000 audit[5549]: USER_END pid=5549 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:46.996000 audit[5549]: CRED_DISP pid=5549 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:47.000948 systemd-logind[1716]: Session 8 logged out. Waiting for processes to exit. Oct 2 18:49:47.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.161:22-139.178.89.65:44914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:47.003840 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 18:49:47.005388 systemd[1]: sshd@7-172.31.30.161:22-139.178.89.65:44914.service: Deactivated successfully. Oct 2 18:49:47.011681 systemd-logind[1716]: Removed session 8. Oct 2 18:49:49.982398 systemd[1]: run-containerd-runc-k8s.io-6eb32345eaef09a6630d7d7b51feabc85e4d430c266d7f8588a904cfde77f3cf-runc.RVUyZ4.mount: Deactivated successfully. Oct 2 18:49:53.273703 systemd[1]: run-containerd-runc-k8s.io-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400-runc.Hm5lpn.mount: Deactivated successfully. Oct 2 18:49:54.262986 systemd[1]: run-containerd-runc-k8s.io-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400-runc.33QE0w.mount: Deactivated successfully. Oct 2 18:49:54.598931 env[1725]: time="2023-10-02T18:49:54.598602771Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 18:49:54.798020 env[1725]: time="2023-10-02T18:49:54.797719593Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:49:54.799192 env[1725]: time="2023-10-02T18:49:54.799081687Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:49:54.799633 kubelet[2952]: E1002 18:49:54.799566 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:49:54.800135 kubelet[2952]: E1002 18:49:54.799651 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:49:54.800135 kubelet[2952]: E1002 18:49:54.799953 2952 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jzw7k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-546b97946d-gvwkp_calico-apiserver(18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:49:54.800135 kubelet[2952]: E1002 18:49:54.800042 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-546b97946d-gvwkp" podUID=18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7 Oct 2 18:49:54.800821 env[1725]: time="2023-10-02T18:49:54.800754116Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 18:49:55.026871 env[1725]: time="2023-10-02T18:49:55.026667573Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:49:55.028242 env[1725]: time="2023-10-02T18:49:55.028113632Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:49:55.028495 kubelet[2952]: E1002 18:49:55.028452 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:49:55.028601 kubelet[2952]: E1002 18:49:55.028517 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:49:55.028694 kubelet[2952]: E1002 18:49:55.028662 2952 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-947vz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-546b97946d-72zq8_calico-apiserver(8ff03378-bde6-4bde-9de5-232c63f1de77): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:49:55.028887 kubelet[2952]: E1002 18:49:55.028725 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-546b97946d-72zq8" podUID=8ff03378-bde6-4bde-9de5-232c63f1de77 Oct 2 18:49:57.036473 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 18:49:57.036593 kernel: audit: type=1130 audit(1696272597.024:1406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.161:22-139.178.89.65:43290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:57.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.161:22-139.178.89.65:43290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:57.024938 systemd[1]: Started sshd@8-172.31.30.161:22-139.178.89.65:43290.service. Oct 2 18:49:57.215000 audit[5633]: USER_ACCT pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.215937 sshd[5633]: Accepted publickey for core from 139.178.89.65 port 43290 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:57.229518 kernel: audit: type=1101 audit(1696272597.215:1407): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.230000 audit[5633]: CRED_ACQ pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.234926 sshd[5633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:57.246746 kernel: audit: type=1103 audit(1696272597.230:1408): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.246879 kernel: audit: type=1006 audit(1696272597.230:1409): pid=5633 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 18:49:57.230000 audit[5633]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebe41800 a2=3 a3=1 items=0 ppid=1 pid=5633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:57.253160 systemd[1]: Started session-9.scope. Oct 2 18:49:57.256069 systemd-logind[1716]: New session 9 of user core. Oct 2 18:49:57.257708 kernel: audit: type=1300 audit(1696272597.230:1409): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebe41800 a2=3 a3=1 items=0 ppid=1 pid=5633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:57.230000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:49:57.262328 kernel: audit: type=1327 audit(1696272597.230:1409): proctitle=737368643A20636F7265205B707269765D Oct 2 18:49:57.267000 audit[5633]: USER_START pid=5633 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.273000 audit[5635]: CRED_ACQ pid=5635 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.288843 kernel: audit: type=1105 audit(1696272597.267:1410): pid=5633 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.288950 kernel: audit: type=1103 audit(1696272597.273:1411): pid=5635 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.622759 sshd[5633]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:57.624000 audit[5633]: USER_END pid=5633 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.629697 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 18:49:57.631030 systemd[1]: sshd@8-172.31.30.161:22-139.178.89.65:43290.service: Deactivated successfully. Oct 2 18:49:57.626000 audit[5633]: CRED_DISP pid=5633 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.637438 kernel: audit: type=1106 audit(1696272597.624:1412): pid=5633 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.646922 systemd-logind[1716]: Session 9 logged out. Waiting for processes to exit. Oct 2 18:49:57.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.161:22-139.178.89.65:43290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:57.648475 kernel: audit: type=1104 audit(1696272597.626:1413): pid=5633 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.648968 systemd-logind[1716]: Removed session 9. Oct 2 18:49:58.600894 kubelet[2952]: E1002 18:49:58.600843 2952 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-4877r" podUID=389cc212-0d3c-420e-bfc5-2856182496ad Oct 2 18:49:59.966883 systemd[1]: run-containerd-runc-k8s.io-6eb32345eaef09a6630d7d7b51feabc85e4d430c266d7f8588a904cfde77f3cf-runc.szOmb7.mount: Deactivated successfully. Oct 2 18:50:05.598122 kubelet[2952]: E1002 18:50:05.598086 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-546b97946d-72zq8" podUID=8ff03378-bde6-4bde-9de5-232c63f1de77 Oct 2 18:50:07.599723 kubelet[2952]: E1002 18:50:07.599684 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-546b97946d-gvwkp" podUID=18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7 Oct 2 18:50:07.658097 systemd[1]: Started sshd@9-172.31.30.161:22-139.178.89.65:49394.service. Oct 2 18:50:07.670682 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:50:07.670840 kernel: audit: type=1130 audit(1696272607.658:1415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.161:22-139.178.89.65:49394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:07.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.161:22-139.178.89.65:49394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:07.848000 audit[5711]: USER_ACCT pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:07.849081 sshd[5711]: Accepted publickey for core from 139.178.89.65 port 49394 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:50:07.860530 kernel: audit: type=1101 audit(1696272607.848:1416): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:07.861000 audit[5711]: CRED_ACQ pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:07.862606 sshd[5711]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:50:07.877431 kernel: audit: type=1103 audit(1696272607.861:1417): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:07.877616 kernel: audit: type=1006 audit(1696272607.861:1418): pid=5711 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 18:50:07.861000 audit[5711]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd800a0b0 a2=3 a3=1 items=0 ppid=1 pid=5711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:07.888237 kernel: audit: type=1300 audit(1696272607.861:1418): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd800a0b0 a2=3 a3=1 items=0 ppid=1 pid=5711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:07.861000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:50:07.892735 kernel: audit: type=1327 audit(1696272607.861:1418): proctitle=737368643A20636F7265205B707269765D Oct 2 18:50:07.898565 systemd[1]: Started session-10.scope. Oct 2 18:50:07.899912 systemd-logind[1716]: New session 10 of user core. Oct 2 18:50:07.911000 audit[5711]: USER_START pid=5711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:07.923746 kernel: audit: type=1105 audit(1696272607.911:1419): pid=5711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:07.924000 audit[5713]: CRED_ACQ pid=5713 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:07.935532 kernel: audit: type=1103 audit(1696272607.924:1420): pid=5713 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:08.336097 sshd[5711]: pam_unix(sshd:session): session closed for user core Oct 2 18:50:08.337000 audit[5711]: USER_END pid=5711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:08.343216 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 18:50:08.344742 systemd[1]: sshd@9-172.31.30.161:22-139.178.89.65:49394.service: Deactivated successfully. Oct 2 18:50:08.340000 audit[5711]: CRED_DISP pid=5711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:08.350641 systemd-logind[1716]: Session 10 logged out. Waiting for processes to exit. Oct 2 18:50:08.359848 kernel: audit: type=1106 audit(1696272608.337:1421): pid=5711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:08.359983 kernel: audit: type=1104 audit(1696272608.340:1422): pid=5711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:08.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.161:22-139.178.89.65:49394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:08.369164 systemd-logind[1716]: Removed session 10. Oct 2 18:50:08.373130 systemd[1]: Started sshd@10-172.31.30.161:22-139.178.89.65:49406.service. Oct 2 18:50:08.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.161:22-139.178.89.65:49406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:08.565512 sshd[5724]: Accepted publickey for core from 139.178.89.65 port 49406 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:50:08.564000 audit[5724]: USER_ACCT pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:08.568872 sshd[5724]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:50:08.567000 audit[5724]: CRED_ACQ pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:08.567000 audit[5724]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe267eda0 a2=3 a3=1 items=0 ppid=1 pid=5724 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.567000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:50:08.578848 systemd-logind[1716]: New session 11 of user core. Oct 2 18:50:08.580843 systemd[1]: Started session-11.scope. Oct 2 18:50:08.591000 audit[5724]: USER_START pid=5724 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:08.600000 audit[5726]: CRED_ACQ pid=5726 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:09.600067 env[1725]: time="2023-10-02T18:50:09.599995223Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 18:50:09.814903 env[1725]: time="2023-10-02T18:50:09.814788441Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:50:09.816387 env[1725]: time="2023-10-02T18:50:09.816271139Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:50:09.816810 kubelet[2952]: E1002 18:50:09.816761 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:50:09.817340 kubelet[2952]: E1002 18:50:09.816849 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 18:50:09.817340 kubelet[2952]: E1002 18:50:09.817041 2952 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-54n56,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-4877r_calico-system(389cc212-0d3c-420e-bfc5-2856182496ad): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:50:09.819013 env[1725]: time="2023-10-02T18:50:09.818921807Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 18:50:09.971562 systemd[1]: run-containerd-runc-k8s.io-6eb32345eaef09a6630d7d7b51feabc85e4d430c266d7f8588a904cfde77f3cf-runc.vUhPul.mount: Deactivated successfully. Oct 2 18:50:10.022057 env[1725]: time="2023-10-02T18:50:10.021964017Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:50:10.023416 env[1725]: time="2023-10-02T18:50:10.023306409Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:50:10.024015 kubelet[2952]: E1002 18:50:10.023686 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:50:10.024015 kubelet[2952]: E1002 18:50:10.023747 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 18:50:10.024015 kubelet[2952]: E1002 18:50:10.023879 2952 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-54n56,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-4877r_calico-system(389cc212-0d3c-420e-bfc5-2856182496ad): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:50:10.024015 kubelet[2952]: E1002 18:50:10.023971 2952 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-4877r" podUID=389cc212-0d3c-420e-bfc5-2856182496ad Oct 2 18:50:10.841134 sshd[5724]: pam_unix(sshd:session): session closed for user core Oct 2 18:50:10.843000 audit[5724]: USER_END pid=5724 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:10.843000 audit[5724]: CRED_DISP pid=5724 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:10.848369 systemd[1]: sshd@10-172.31.30.161:22-139.178.89.65:49406.service: Deactivated successfully. Oct 2 18:50:10.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.161:22-139.178.89.65:49406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:10.849833 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 18:50:10.850492 systemd-logind[1716]: Session 11 logged out. Waiting for processes to exit. Oct 2 18:50:10.852532 systemd-logind[1716]: Removed session 11. Oct 2 18:50:10.871343 systemd[1]: Started sshd@11-172.31.30.161:22-139.178.89.65:49422.service. Oct 2 18:50:10.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.161:22-139.178.89.65:49422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:11.074000 audit[5754]: USER_ACCT pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:11.075555 sshd[5754]: Accepted publickey for core from 139.178.89.65 port 49422 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:50:11.078000 audit[5754]: CRED_ACQ pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:11.079000 audit[5754]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4f89090 a2=3 a3=1 items=0 ppid=1 pid=5754 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:11.079000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:50:11.080258 sshd[5754]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:50:11.089365 systemd-logind[1716]: New session 12 of user core. Oct 2 18:50:11.092503 systemd[1]: Started session-12.scope. Oct 2 18:50:11.109000 audit[5754]: USER_START pid=5754 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:11.116000 audit[5759]: CRED_ACQ pid=5759 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:11.520696 sshd[5754]: pam_unix(sshd:session): session closed for user core Oct 2 18:50:11.522000 audit[5754]: USER_END pid=5754 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:11.523000 audit[5754]: CRED_DISP pid=5754 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:11.526302 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 18:50:11.528059 systemd[1]: sshd@11-172.31.30.161:22-139.178.89.65:49422.service: Deactivated successfully. Oct 2 18:50:11.528549 systemd-logind[1716]: Session 12 logged out. Waiting for processes to exit. Oct 2 18:50:11.529000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.161:22-139.178.89.65:49422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:11.532236 systemd-logind[1716]: Removed session 12. Oct 2 18:50:13.273703 systemd[1]: run-containerd-runc-k8s.io-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400-runc.XPQzfI.mount: Deactivated successfully. Oct 2 18:50:13.356806 systemd[1]: run-containerd-runc-k8s.io-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400-runc.Sfgtif.mount: Deactivated successfully. Oct 2 18:50:17.599028 env[1725]: time="2023-10-02T18:50:17.598947357Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 18:50:17.791264 env[1725]: time="2023-10-02T18:50:17.790937305Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:50:17.792622 env[1725]: time="2023-10-02T18:50:17.792510185Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:50:17.792958 kubelet[2952]: E1002 18:50:17.792928 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:50:17.793594 kubelet[2952]: E1002 18:50:17.793557 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:50:17.793914 kubelet[2952]: E1002 18:50:17.793884 2952 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-947vz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-546b97946d-72zq8_calico-apiserver(8ff03378-bde6-4bde-9de5-232c63f1de77): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:50:17.794325 kubelet[2952]: E1002 18:50:17.794299 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-546b97946d-72zq8" podUID=8ff03378-bde6-4bde-9de5-232c63f1de77 Oct 2 18:50:19.968325 systemd[1]: run-containerd-runc-k8s.io-6eb32345eaef09a6630d7d7b51feabc85e4d430c266d7f8588a904cfde77f3cf-runc.oDQPN5.mount: Deactivated successfully. Oct 2 18:50:21.551921 systemd[1]: Started sshd@12-172.31.30.161:22-139.178.89.65:52700.service. Oct 2 18:50:21.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.161:22-139.178.89.65:52700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:21.556158 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 18:50:21.556284 kernel: audit: type=1130 audit(1696272621.552:1442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.161:22-139.178.89.65:52700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:21.607395 kubelet[2952]: E1002 18:50:21.606307 2952 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-4877r" podUID=389cc212-0d3c-420e-bfc5-2856182496ad Oct 2 18:50:21.743000 audit[5836]: USER_ACCT pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:21.744711 sshd[5836]: Accepted publickey for core from 139.178.89.65 port 52700 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:50:21.757442 kernel: audit: type=1101 audit(1696272621.743:1443): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:21.757000 audit[5836]: CRED_ACQ pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:21.758739 sshd[5836]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:50:21.775546 kernel: audit: type=1103 audit(1696272621.757:1444): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:21.775702 kernel: audit: type=1006 audit(1696272621.757:1445): pid=5836 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 18:50:21.757000 audit[5836]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff569bde0 a2=3 a3=1 items=0 ppid=1 pid=5836 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:21.786689 kernel: audit: type=1300 audit(1696272621.757:1445): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff569bde0 a2=3 a3=1 items=0 ppid=1 pid=5836 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:21.757000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:50:21.796077 kernel: audit: type=1327 audit(1696272621.757:1445): proctitle=737368643A20636F7265205B707269765D Oct 2 18:50:21.794854 systemd-logind[1716]: New session 13 of user core. Oct 2 18:50:21.796875 systemd[1]: Started session-13.scope. Oct 2 18:50:21.811000 audit[5836]: USER_START pid=5836 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:21.824000 audit[5838]: CRED_ACQ pid=5838 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:21.835303 kernel: audit: type=1105 audit(1696272621.811:1446): pid=5836 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:21.835476 kernel: audit: type=1103 audit(1696272621.824:1447): pid=5838 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:22.206164 sshd[5836]: pam_unix(sshd:session): session closed for user core Oct 2 18:50:22.209000 audit[5836]: USER_END pid=5836 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:22.221465 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 18:50:22.222940 systemd[1]: sshd@12-172.31.30.161:22-139.178.89.65:52700.service: Deactivated successfully. Oct 2 18:50:22.209000 audit[5836]: CRED_DISP pid=5836 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:22.233038 kernel: audit: type=1106 audit(1696272622.209:1448): pid=5836 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:22.233193 kernel: audit: type=1104 audit(1696272622.209:1449): pid=5836 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:22.234135 systemd-logind[1716]: Session 13 logged out. Waiting for processes to exit. Oct 2 18:50:22.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.161:22-139.178.89.65:52700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:22.236680 systemd-logind[1716]: Removed session 13. Oct 2 18:50:22.604088 env[1725]: time="2023-10-02T18:50:22.603995871Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 18:50:22.810352 env[1725]: time="2023-10-02T18:50:22.810219797Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 18:50:22.811892 env[1725]: time="2023-10-02T18:50:22.811791537Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 18:50:22.812322 kubelet[2952]: E1002 18:50:22.812275 2952 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:50:22.812886 kubelet[2952]: E1002 18:50:22.812341 2952 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 18:50:22.812886 kubelet[2952]: E1002 18:50:22.812527 2952 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jzw7k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-546b97946d-gvwkp_calico-apiserver(18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 18:50:22.812886 kubelet[2952]: E1002 18:50:22.812588 2952 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-546b97946d-gvwkp" podUID=18f40cd9-1e9a-4f77-bca8-6b4fcfae2cd7 Oct 2 18:50:23.281883 systemd[1]: run-containerd-runc-k8s.io-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400-runc.s0HWZ9.mount: Deactivated successfully. Oct 2 18:50:23.361823 systemd[1]: run-containerd-runc-k8s.io-61b2341159364ebb2ece2da051321117696cad3217cdea2b8df4c34bd18cd400-runc.OTL1mV.mount: Deactivated successfully.